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ABSTRACT 


The Department of Homeland Security (DHS) holds the statutory mission to 
protect the nation’s critical infrastructure, which is the systems and assets that are 
nationally significant, and whose losses would result in debilitating consequences to the 
safety and security of the United States. Based on a meta-analysis of government 
policies, the current critical infrastructure protection (IP) efforts may be misdirected even 
though it is the cornerstone mission of the department to prevent terrorism and enhance 
security. It is likely that the facilities DHS works to protect from terrorism are not the 
most likely targets for attacks. The manner in which facilities are designated as critical 
infrastructure may have stemmed from shared experience of many in senior leadership as 
military strategists rather than from identifying the targets of extremists. Even when a 
facility is destroyed, the consequences may be more complex than the mission of 
protecting a single facility against all threats and hazards. These findings can justify 
reducing the scope of the current IP mission and refining the focus through a risk-based 
methodology for evaluating only the infrastructure that would cause debilitating impacts 
on the safety and security of the nation. 
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EXECUTIVE SUMMARY 


A. ORIGIN OF THE RESEARCH QUESTION 

The owner of a eommercial offiee building ean eontaet the Department of 
Homeland Seeurity (DHS) and request that a federal representative tour the building to 
identify vulnerabilities from terrorism. Information about the physical attributes of the 
facility is entered into a computer program to model risks along with high definition 
photographs of the exterior. To mitigate the risks from terrorist threats, DHS suggests 
strategies, such as adding fences, installing electronic access control devices, mounting 
additional closed circuit television cameras, or conducting random security screenings of 
visitors. DHS will also provide free training courses for the building’s security officers to 
learn about searching for improvised explosives, handling bomb threats, or identifying 
terrorists who are conducting surveillance. i These services that DHS offers to privately 
owned commercial facilities (CF) fall under the department’s statutory critical 
infrastructure (Cl) protection mission and extend to 77,069 locations designated as 
“critical infrastructure” in the United States.^ How does the recommendation that an 
office building surround itself with a higher fence align with the federal mission to 
protect “the assets, systems, and networks, whether physical or virtual, so vital to the 
United States that their incapacitation or destruction would have a debilitating effect on 
security, national economic security, national public health or safety, or any combination 
thereof?”^ Are the federal resources being expended to provide security consultation to 


1 “Protective Security Advisors,” June 23, 2015, http://www.dhs.gov/protective-security-advisors. 

^ Office of Inspector General, Progress in Developing the National Asset Database (OIG-06-40) 
(Washington, DC: Department of Homeland Security, 2006), http://www.oig.dhs.gov/assets/Mgmt/OIG_ 
06-40_Jun06.pdf 

3 “What is Critical Infrastructure?” August 26, 2015, http://www.dhs.gov/what-critical-infrastructure. 
Department of Homeland Security. 
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individual infrastructure facilities helping to accomplish the DHS’s cornerstone"^ mission 
of proteeting the country from terrorist attaeks?^ 

B. INTRODUCTION 

The ehapters of this thesis explore the ideas that not everything designated as 
eritieal meets the definition of eriticality; the methodologies for evaluating infrastrueture 
are not aligned to the threats from terrorism; when supposedly Cl, especially CF, are 
damaged or destroyed, it turns out the facility was not critical after all; and the overall 
systems of essential-to-life infrastructure aeross the eountry are more resilient than the 
current methodologies presuppose. 

This researeh is a meta-analysis of government policies on infrastrueture 
protection (IP) to address the question of how these facilities became designated as 
eritieal and if the scope of the current IP effort is inhibiting the department’s ability to 
aceomplish the mission. This researeh is limited to the risk evaluation, vulnerability 
assessment, and protection of physical infrastructure facilities. Rather than simply 
restating problems with IP that have already been published by the Government 
Accountability Office (GAO) and Congressional Researeh Service, this thesis intends to 
determine the origins of eurrent Cl protection policies and the underlying ehallenges in 
aceomplishing the mission. 

C. LITERATURE REVIEW 

This researeh examines the federal IP polieies that have been issued over the past 
35 years to determine the origin and evolution of the mission. Within these doeuments, a 
eonsensus ean be drawn that the definition of the term “critical infrastructure” is the 
systems and assets that are nationally signifieant and the loss of whieh would result in 
debilitating eonsequenees to the safety and seeurity of the United States. The 10 


^ Department of Homeland Security, The 2014 Quadrennial Homeland Security Review (Washington, 
DC: Department of Homeland Security, 2014), 6, http://www.dhs.gov/sites/default/fdes/publications/2014- 
qhsr-fmal-508.pdf 

5 Ibid. 
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overarching Cl policies^ released over the past 19 years consistently describe Cl as being 
nationally significant, providing vital services, being part of an interconnected system, 
causing debilitating impacts if destroyed, and providing a service necessary to the health 
and safety of the general public. 

Based on the analysis within this thesis, infrastructure that lacks national 
significance, criticality, and interconnectedness to other infrastructure systems does not 
meet this definition. The protection strategies for CF presented in the 2010 NIPP Sector 
Specific Plan (SSP)—Commercial Facilities lack information about the continuation of 
essential-to-life services or protection of nationally significant facilities, which underpins 
the definitions of CL As a result, the CF sector serves as an example of the misalignment 
between what is critical to the nation and what is currently designated as critical by DHS. 
The CF plan puts emphasis on resilience, openness, and profitability, which does not 
suggest that critical functions are being carried out or the loss of those functions would 
result in debilitating impacts to the nation.^ While resilience, openness, and profitability 
are positive business practices, it is ineffective for DHS to be writing plans about 
concepts that do not correspond to criticality, which is the underlying principle of the IP 
mission. 

This inefficiency creates a discrepancy between the federal policies that define Cl 
and how DHS currently addresses its statutory IP mission to identify, prioritize, and 
protect the nation’s most vital infrastructure.^ 


^ Quadrennial Homeland Security Review, NIPP, PPD-21, Exec. Order No. 13636, NIPP, National 
Security Strategy, HSPD-1, USA PATRIOT Act, PDD/NSC-63, and Exec. Order No. 13010. 

^ Department of Homeland Security, Commercial Facilities Sector-Specific Plan an Annex to the 
National Infrastructure Protection Plan 2010 (Washington, DC: Department of Homeland Security, 2010), 
http://www.dhs.gOv/xlibrary/assets/nipp-ssp-commercial-facilities-2010.pdf 

^ The White House, Presidential Policy Directive—Critical Infrastructure Security and Resilience 
Presidential Policy Directive/PPD-21—Critical Infrastructure Security and Resilience (Washington, DC: 
The White House, 2013), http://www.whitehouse.gov/the-press-office/2013/02/12/presidential-policy- 
directive-critical-infrastmcture-security-and-resil. 
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D. PROBLEMS WITH CURRENT DHS CRITICAL INFRASTRUCTURE 

POLICIES 

This research summarizes the concrete shortfalls with IP that have been 
documented by other sources including the GAO. A problem with the current policies is 
that many of the 77,069 facilities do not meet the consensus definition identified in the 
literature review but are still considered to be “critical infrastructure.” The origin of this 
issue may have stemmed from the early directive for the newly formed DHS to develop a 
list of all of the critical facilities across the country.^ This thesis explores the challenges 
from the creation of the National Asset Database (NADB) and the mandate to develop a 
centralized list of facilities. The problems with the creation of the list were likely 
compounded by the need to rely on individual facilities to self-assess, and subsequently, 
overestimate risk. Within this research, the DHS Cl chemical sector serves as an example 
of the challenges that occur with identifying and assessing critical facilities despite 
spending hundreds of millions of dollars and still resulting in an undetermined reduction 
in the risk from terrorism. 

E. SOURCES OF THE PROBLEM 

This research also examines theoretical explanations for the challenges with 
accomplishing the current Cl protection mission. Modern military theories provide a 
potential explanation for the focus of DHS’s efforts because the threats from terrorism 
have likely been evaluated based on the education and experience of senior officials with 
principles of strategic warfare. 

Nationally significant infrastructure facilities that can cripple the essential 
functions of the entire country would be attractive targets for an enemy nation-state to 
strike with ballistic missile and airpower capabilities during a war. The current terrorist 
threat comes from homegrown violent extremist and members of terrorist groups who are 


9 United States Congress, Committee Reports 109th Congress (2005-2006) House Report 109-713 — 
Part 1 (Washington, DC: United States Congress, 2007), http://thomas.loe.gov/egi-bin/epquery/?&sid= 
ep 109alJsu&r_n=hr713p 1.109&dbname=ep 109&&seHTOC_l 92496&. 
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motivated to inflict mass casualties in the locations most visible and easily accessible^*’ 
An individual terrorist or a small group of terrorists most likely lack the intelligence, 
organizational coordination, manpower, and resources to conduct a strategic warfare 
campaign against nationally significant infrastructure targets with the intent of crippling 
essential-to-life systems across the country. The strategic warfare approach of developing 
a static list of vulnerable assets does not match the unpredictable and dynamic threat from 
terrorism. The current IP policies identify the likely targets of a nation-state army and 
assume them to be the same targets that terrorists would have the intention and capability 
of attacking. 

F. CASE STUDIES OF THE DESTRUCTION OF CRITICAU FACIUITIES 

The concept of protecting Cl could altogether be a wasted effort because when 
supposedly Cl is destroyed, the impacts are often negligible, or in some cases, even 
results in economic gains. It should be noted that the loss of human lives can occur with 
the destruction of critical facilities but the IP mission is not always focused on reducing 
human loses. In 2013, 32,719 traffic collision fatalities occurred on roadways” that fall 
under the Cl transportation systems sector but it is the mission of DHS to protect the 
physical transportation infrastructure from terrorist attacks rather than investing resources 
to prevent thousands of annual deaths from occurring during vehicle accidents on the 
highways.” It is within the scope of the DHS mission to assess how a bridge could be 
attacked with explosives by terrorists but not to assess if installing higher guardrails 
could prevent a car from accidently driving off the bridge. 

Even when terrorists do successfully strike, the consequences may be more 
complex than making a blanket assumption that all Cl facilities should be protected under 
all circumstances. Case studies of the World Trade Center (WTC) and the Las Vegas 

” “Countering Violent Extremism,” July 20, 2015, littp://www.dlis.gov/topic/countering-violent- 
extremism. 

’ ’ National Highway Transportation Safety Administration, Traffic Safety Facts 2013 Data 
(Washington, DC: U.S. Department of Transportation, 2015), http://www-nrd.nhtsa.dot.gov/Pubs/ 
812181.pdf 

” “Transportation Systems Sector,” March 25, 2013, http://www.dhs.gov/transportation-systems- 
sector. 
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Strip casinos challenge the general assertion that negative eeonomie eonsequenees always 
result from the destruetion of a “eritical” faeility. A ease study of the 2014 toxie ehemieal 
spill into the primary water souree serving Charleston, WV provides an example that is 
eontrary to the assumption that the loss of a faeility serving as a sole provider of an 
essential-to-life serviee results in caseading, debilitating impaets aeross all infrastrueture 
seetors. The destruetion of supposedly eritieal faeilities has demonstrated that greater 
resilienee does oeeur aeross infrastrueture systems than DHS generally assumes. Instead 
of foeusing proteetion efforts on potential losses, greater value may be found in 
understanding existing resiliency. 

While it was unforeseeable at the time, the Lower Manhattan area that was most 
heavily impaeted by the September 11, 2001 (9/11) attaeks is more valuable today and 
better positioned for the future than it was prior to 2001. If terrorists eannot eripple this 
nation by toppling 100-story eommercial high-rise buildings, what kinds of facilities 
would have a debilitating impaet on the entire nation if they were destroyed? Instead of 
being designated “eritieal,” the majority of infrastrueture faeilities are insignifieant to the 
functions of the overall system because the loss of these faeilities does not cause 
widespread disruptions to the nation, region, or even the loeal area. The worst 
cireumstanees may spur the greatest opportunity for positive ehange, whieh eould shift 
homeland seeurity strategies to foeus primarily on effeetive reeovery rather than 
proteeting existing systems. 

G. AN ALTERNATIVE STRATEGY 

A solution for aoeomplishing the task of effeetively identifying, prioritizing, and 
proteeting Cl is refining the eriteria for how faeilities are determined to be eritieal. A 
lower number of eritieal faeilities will reduee the overall seope of the proteetion mission. 
To identify facilities more effectively that are Cl, DHS should consider using a risk-based 
approaeh within a more narrow definition of the term that can be modeled after best 
praetices from the United Kingdom (UK). The United Kingdom uses the designation of 
“national infrastrueture” to emphasize the seope of the mission, which is focused 
exelusively on the systems that the entire eountry is dependent on for daily life. For an 
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infrastructure asset to be eonsidered a national priority, both a high level of eritieality and 
a high likelihood of something negative oeeurring must exist. Adopting a risk-based 
approaeh for both the prioritization of faeilities through the likelihood of destruetion and 
evaluation of national impaets ean assist DHS in more effeetively designating faeilities as 
“eritieal.” 

H. FINDINGS, CONCLUSIONS, AND RECOMMENDATIONS 

The evidenee presented within this thesis argues that DHS is not fulfilling the 
mission of proteeting the infrastrueture that is eritieal to the nation by expending 
resourees on misaligned efforts at thousands of insignifieant faeilities. These problems 
are rooted in the eurrent scope of the infrastrueture mission being too large but is further 
eomplieated beeause the types of faeilities designated as eritieal may not be the likely 
targets of terrorists. The few faeilities that are eritieal to the nation are most likely too 
large, too remote, or too seeure for a terrorist group to destroy, or to have an interest in 
targeting. 

On a loeal and regional level, redundaney and resilieney oeeur aeross 
infrastrueture systems allowing affeeted areas to absorb outages and unaffeeted areas to 
provide alternative serviees. As a baekstop, national emergeney response eapabilities ean 
quiekly deliver essential serviees during outages, sueh as the bottled water supplied to 
Charleston, WV following the ehemieal spill into the water supply. Also, enormous 
eomplexity within infrastrueture systems makes predieting the impaets of outages 
extremely diffieult, as demonstrated by the unantieipated eeonomie gains in Lower 
Manhattan following the 9/11 attaeks. 

Based on this thesis, DHS should ensure that everything designated as “eritieal” 
meets the definition of eritieality, that the methodologies used for evaluating 
infrastrueture align to the mission of proteeting the nation for terrorism, and that 
proteetion efforts aeeount for the existing resilieney within the systems that provide 
essential-to-life infrastrueture aeross the eountry. 
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I. 


INTRODUCTION 


Terrorist attacks can shake the foundations of our biggest buildings, but 
they cannot touch the foundation of America. These acts shattered steel, 
but they cannot dent the steel of American resolve. 

— President George W. Bush, September 11, 20011 


The literal foundations of the United States are the Cl systems that provide 
essential-to-life services on which the American people are dependent. These Cl systems 
are “so vital to the United States that their incapacitation or destruction would have a 
debilitating effect on security, national economic security, national public health or 
safety, or any combination thereof ”2 Even after the Twin Towers fell, America remained 
capable of functioning, and President Bush said that night, “the functions of our 
government continue without interruption...our financial institutions remain strong, and 
the American economy will be open for business, as well.”3 

The terrorist attack had shattered steel but was unable to dent an enormously 
complex and resilient national system of infrastructure facilities. If terrorists cannot 
cripple this nation (even on the local level) by toppling 100-story commercial high-rise 
buildings, what kinds of facilities would have a debilitating impact on the entire nation if 
they were destroyed? 

A. RESEARCH QUESTION 

This thesis explores the questions of what infrastructure is critical to the nation 
and if current IP efforts are aligned to protecting the most critical facilities. The research 
also addresses the questions of if terrorists are likely to target Cl facilities and if the 
overall concept of protecting infrastructure is actually an unnecessary effort. 


1 “Statement by President George W. Bush in His Address to the Nation,” September 11, 2001, 
http://www.91 lmemorial.org/sites/all/fdes/Statement. 

2 “What is Critieal Infrastructure?” August 26, 2015, http://www.dhs.gov/what-critical-infrastructure. 
^ “Statement by President George W. Bush in His Address to the Nation.” 
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B. SIGNIFICANCE OF RESEARCH 


The chapters of this thesis explore the ideas that not everything designated as 
critical meets the definition of criticality. The methodologies for evaluating infrastructure 
are not aligned to evaluating the threats from terrorism. When supposedly Cl, especially 
CF, is damaged or destroyed, it turns out that these facilities were not critical after all. 
Finally, the overall systems of essential-to-life infrastructure across the country are more 
resilient than the current methodologies presuppose. 

The Department of Homeland Security (DHS) has a statutory mission to protect 
CH and the National Strategy for Homeland Security states, 

devastation of even one sector of our critical infrastructure or key 
resources would have a debilitating effect on our national security. 
Ensuring the survivability of our critical infrastructure assets, systems, and 
networks requires that we continue to accurately model their 
interdependencies and better understand the potential cascading effects 
that could impact or impede operations in interconnected infrastructures.^ 

Continuously monitoring and analyzing interdependencies within interconnected 
infrastructure systems is a difficult task. The analysis within this thesis provides 
justification for reducing the size of the mission to focus on a smaller number of critical 
facilities. 

C. SCOPE OF RESEARCH 

This research is a meta-analysis of government policies on IP to address the 
question of how these facilities became designated as critical and if the scope of the 
current IP effort is inhibiting the department’s ability to accomplish the mission. This 
research is limited to the risk evaluation, vulnerability assessment, and protection of 
physical infrastructure facilities. Rather than simply restating problems with IP that have 
already been published by the Government Accountability Office (GAO) and 


^ The White House, Presidential Policy Directive—Critical Infrastructure Security and Resilience 
Presidential Policy Directive/PPD-21—Critical Infrastructure Security and Resilience (Washington, DC: 
The White House, 2013), http://www.whitehouse.gov/the-press-offiee/2013/02/12/presidential-pohey- 
direetive-eritieal-infrastrueture-seeurity-and-resil. 

^ Homeland Seeurity Couneil, National Strategy for Homeland Security (Washington, DC: The White 
House, 2007), 27, http://www.dhs.gov/xhbrary/assets/nat_strat_homelandseeurity_2007.pdf 
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Congressional Research Service, this thesis intends to determine the origins of current Cl 
protection policies and the underlying challenges in accomplishing the mission. 

Homeland Security Presidential Directive 7 calls for “strategic improvements in 
security that can make it more difficult for attacks to succeed and can lessen the impact of 
attacks that may occur. In addition to strategic enhancements, tactical security 
improvements can be rapidly implemented to deter, mitigate, or neutralize potential 
attacks.”^ Presidential Policy Directive 21^ the overarching federal policy that dictates 
IP, is also focused primarily on the physical protection of facilities from terrorist attacks, 
which is why this research is focused exclusively on that aspect of the Cl protection 
mission. 

This research does not include cyber and all-hazard (hurricanes, earthquakes, and 
other natural hazards) threats. The nature and source of cyber threats are constantly 
evolving and with nearly all aspects of infrastructure, business, and personal life 
connected to the Internet, these threats are too broad and uncertain for the purposes of 
this research. The GAO has also reported that DHS lacks a strategy for defining, 
identifying, and assessing the cyber risks to buildings,^ thus, this research focuses on the 
more established physical security mission. All-hazards planning is rooted in the 
evaluation of the risks from predictable or forecastable natural disasters for determining 
how mitigation efforts (e.g., building a flood wall or adding structural shoring) can hedge 
those risks. The unpredictability and uncertainty of intentional terrorist attacks on 
physical infrastructure facilities requires completely different protective measures and 
evaluations of risk for determining vulnerability. According to Homeland Security 
Secretary Jeh Johnson’s May 2015 remarks, “counterterrorism must remain the 
cornerstone of our Department’s overall homeland security mission. It’s the reason the 


^ The White House, Homeland Security Presidential Directive 7 (Washington, DC: The White House, 
2003), http://www.dhs.gov/homeland-seeurity-presidential-direetive-7. 

^ The White House, Presidential Policy Directive—Critical Infrastructure Security and Resilience 
Presidential Policy Directive/PPD-21—Critical Infrastructure Security and Resilience. 

^ Government Accountability Office, Federal Facility Cyber Security DHS and GSA Should Address 
Cyber Risk to Building and Access Control Systems (GAO-15-6) (Washington, DC: U.S. Government 
Accountability Office, 2014), http://www.gao.gov/assets/670/667512.pdf 
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Department was ereated by Congress in the wake of 9/11.”^ Cyber intrusions and natural 
disasters are not the primary foeus of DHS, whieh is why this researeh focuses on the 
protection of physical infrastructure from terrorist attacks. 

This research also does not evaluate classified and protected Cl information. 
Infrastructure is public by the nature of the services the facilities provide the consumers 
(who are the general public) and the private ownership of the majority of facilities. Since 
protection of this infrastructure is a shared mission between the government and private 
industry, openly sharing information about what is critical is necessary to coordinate 
effectively across multiple industries, private owners, local governments, and the public. 
The GAO has highlighted that the “Department of Homeland Security is not positioned to 
manage an integrated and coordinated government approach for assessments [of critical 
infrastructure facilities] as called for in the National Infrastructure Protection Plan.”ii 
Classification likely contributes to the lack of integration and coordination between all 
parties involved in IP by preventing the open sharing of information. This thesis 
investigates openly available information and is not an evaluation of the classified tiered 
list of infrastructure facilities maintained by the DHS Security Office of Infrastructure 
Protection. 

D. OVERVIEW OF CHAPTERS 

This thesis is organized to provide the reader with the background on Cl policies, 
explain the problems with the current Cl protection efforts, and offer explanations for the 
root of these problems. The thesis then explores cases studies that challenge general 
assumptions about Cl facilities and offers an alternative strategy as a solution. 


^ Jeh Charles Johnson, “Remarks By Secretary Jeh Charles Johnson On “The New Realities Of 
Homeland Security” As Part of the Landon Lecture Series on Public Issues—As Prepared for Delivery,” 
Department of Homeland Security, May 27, 2015, http://www.dhs.gov/news/2015/05/27/remarks-secre 
tary-homeland-security-jeh-charles-johnson-%E2%80%9C-new-realities-homeland. 

“Protected Critical Infrastructure Information (PCll) Program,” June 18, 2014, http://www.dhs.gov/ 
protected-critical-infrastructure-information-pcii-program. 

11 Government Accountability Office, Critical Infrastructure Protection DHS Action Needed to 
Enhance Integration and Coordination of Vulnerability Assessment Efforts (GAO-14-507) (Washington, 
DC: U.S. Government Accountability Office, 2014), http://www.gao.gov/assets/670/665788.pdf 
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Chapter II, the literature review, examines the federal IP policies that have been 
issued over the past 35 years to determine the origin and evolution of the mission. Within 
these documents, a consensus can be drawn that the definition of the term “critical 
infrastructure” is the systems and assets that are nationally significant and the loss of 
which would result in debilitating consequences to the safety and security of the United 
States. 

Chapter III, the problems with current DHS Cl policies, summarizes the concrete 
shortfalls with IP that have been documented. An underlying problem is that many of the 
currently designated Cl facilities do not meet the consensus definition identified in the 
literature review. This chapter also explores the challenges from the mandate to develop a 
centralized list of facilities and the problems with relying on individual facilities to self- 
assess, and subsequently, overestimate risk. 

Chapter IV, the source of the problems, examines theoretical explanations for the 
challenges with accomplishing the current Cl protection mission. Modern military 
theories provide a potential explanation for the focus of DHS’s efforts because the threats 
from terrorism have likely been evaluated based on the education and experience of 
senior officials with principles of strategic warfare. The strategic warfare approach of 
developing a static list of vulnerable assets does not match the unpredictable and dynamic 
threat from terrorism. The current IP policies identify the likely targets of a nation-state 
army and assume them to be the same targets that terrorists would have the intention and 
capability of attacking. 

Chapter V, case studies of the destruction of critical facilities, explores the 
concept of protecting Cl that could altogether be a wasted effort because when 
supposedly Cl is destroyed, the impacts are often negligible, or in some cases, even 
results in economic gains. 

Chapter VI, an alternative strategy, provides a solution for accomplishing the task 
of effectively identifying, prioritizing, and protecting Cl, and refines the criteria for how 
facilities are determined to be critical. A lower number of critical facilities will reduce the 
overall scope of the protection mission. To identify facilities more effectively that are Cl, 
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the DHS should consider using a risk-based approach within a more narrow definition of 
the term that can be modeled after best practices from the United Kingdom (UK). 
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II. BACKGROUND AND LITERATURE REVIEW 


A. OVERVIEW 

Over the past 30 years, federal government policies have stated the importance of 
protecting CL Key documents in defining this protection mission have included President 
Clinton’s Executive Order 13010, the USA PATRIOT Act, Presidential Policy Directive 
63, multiple iterations of the National Critical Infrastructure Protection Plan (NIPP), and 
the 2014 Quadrennial Homeland Security Review. As the concepts within the policies 
develop over time, the definitions of Cl continues to remain focused on the systems and 
assets that are nationally significant and their losses result in debilitating consequences to 
the safety and security of the United States. 

B. PRE-9/11 CRITICAL INFRASTRUCTURE IN FEDERAL POLICY 

Prior to the establishment of DHS, the concept of Cl existed in federal policies. In 
the 1980s, the Congressional Budget Office determined Cl to be systems that “share 
common characteristics of capital intensiveness and high public investment at all levels 
of government.” Infrastructure was divided into seven critical sectors: “highways, public 
transit, wastewater treatment, water resources, air traffic control, airports, and municipal 
water supply.” While this list did not include other sectors that are now considered 
critical, such as communications systems, the methodology of the analysis used during 
the time period was based on the assumption stated in the 1988 Congressional report that 
Cl “excludes some facilities often thought of as infrastructure where the initial onus of 
responsibility is on private individuals.’’^^ 

Prior to September 11, 2001 (9/11), President Clinton’s Executive Order 13010 
defined Cl as being “so vital that their incapacity or destruction would have a debilitating 


U.S. Congressional Budget Office, Public Works Infrastructure: Policy Considerations for the 
1980s (Washington, DC: U.S. Government Printing Office, 1983), 1. 

U.S. Congressional Budget Office, New Directions for the Nation’s Public Works (Washington, 
DC: U.S. Government Printing Office, 1988), xi-xii. 
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impact on the defense or eeonomie seeurity of the United States.PDD/NSC-63 
follows the same rhetorie by stating that Cl is “so vital to the Nation that their ineapaeity 
or destruetion would have a debilitating impaet on national seeurity, national eeonomie 
seeurity, and/or national public health and safety.The proteetion mission of the 
directive foeused on identifying the “minimum essential infrastrueture in each sector,” 
which would include only the infrastructure that would “significantly damage the United 
States” if it was attaeked.i^ In response to the requirements of PDD/NSC-63 for 
government eomponents to provide their own speeifie IP plans, the Department of 
Defense (DOD) artieulated some of the ehallenges to meeting the direetive’s 
requirements. The 1998 DOD Critical Infrastructure Protection Plan asserts that “the 
eomplexity of the problem manifests itself in the laek of shared understanding of the 
terminology and the variety of different pereeptions held by the Department’s and the 
nation’s leadership about the meaning and diseipline of designing evolving, assuring, and 
protecting infrastructure.”To address PDD-63’s requirement to determine the 
minimum essential infrastrueture in eaeh seetor, the DOD plan states, “this begs the 
questions: essential or eritieal to whom or for what?,”i^ whieh shows the eontinued 
ehallenges in determining what eonstitutes infrastrueture as eritieal. 

C. 9/11-DRIVEN POLICIES AND THE FORMATION OF DHS 

In the Bush Administration’s original proposal for defining the roles of DHS in 
2002, identifying and protecting Cl were speeifie tasks for the department. While the 


Exec. Order No. 13010, Critical Infrastructure Protection (1996), accessed July 26, 2015, 
http://fas.org/irp/offdocs/eol3010.htm. 

1^ The White House, Presidential Decision Directive/NSC-63 (Washington, DC: The White House, 
1998), http://www.fas.org/irp/offdocs/pdd/pdd-63.htm. 

16 Ibid. 

1^ Department of Defense, The Department of Defense Critical Infrastructure Protection Plan Version 
1.0 (Washington, DC: Department of Defense, 1998), http://www.fas.org/irp/offdocs/pdd/DOD-CIP- 
Plan.htm. 

18 Ibid. 
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proposal stated the mission, the definition of Cl was laeking, whieh made the sueeess in 
meeting the IP mission diffieult to measure 

While infrastrueture systems have been determined to be critical through a variety 
of measures, the USA PATRIOT Act provides a concrete definition that is cited within 
subsequent policies, national plans, and directives pertaining to Cl. The USA PATRIOT 
Act states that Cl is “systems and assets, whether physical or virtual, so vital to the 
United States that the incapacity or destruction of such system and assets would have 
debilitating impact on security, national economic security, and national public health or 
safety, or any combination of those matters.”20 

In 2003, Homeland Security Presidential Directive (HSPD): Critical Infrastructure 
Identification, Prioritization, and Protect, gave the Secretary of Homeland Security the 
statutory responsibility of “coordinating the overall national effort to enhance the 
protection of the Cl and key resources of the United States.”2i The Cl protection mission 
was rooted in protecting infrastructure that would cause a catastrophic loss of life, impair 
the government’s ability to function, or cripple the economy .22 This directive also 
assigned the Secretary of Homeland Security with the responsibility for designating 
events as “national special security events” but that assignment within this directive is not 
stated to be directly related to the IP missions.23 

Prior to the most current version of the NIPP, the first Interim National 
Infrastructure Protection Plan published in February 2005, offered the definition of then 
critical infrastructure and key resources (CI/KR) as the “infrastructure and key resources 


John Moteff, Claudia Copeland, and John Fischer, Critical Infrastructures: What Makes an 
Infrastructure Critical? (CRS Report No. RL31556) (Washington, DC: Congressional Research Service, 
2003, http://fas.org/irp/crs/RL31556.pdf 

20 1016(e) ofthe USA Patriot Act of 2001 (42U.S.C. §5195c(e) (2001). 

21 The White House, Homeland Security Presidential Directive 7: Critical Infrastructure 
Identification, Prioritization, and Protection (Washington, DC: The White House, 2003), Section 11, 
http://www.dhs.gov/homeland-security-presidential-directive-7. 

22 Ibid., Section 7. 

23 Ibid., Section 26. 
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vital to our national security, economic vitality, and way of life.”^^ An attack on the 
nation’s key resources would have “cascading effects” and cause “large-scale human 
casualties and property destruction...also profound damage to the national prestige, 
morale, and confidence.”25 The plan proposed that a two-pronged approach of reducing 
vulnerabilities and taking threat-initiated actions as the best strategy for reducing risks to 
infrastructure.26 Being the first iteration of the NIPP, the plan focuses on data collection 
(through the national CI/KR inventory) and the identification of risks rather than the 
concept of resilient systems, which appear in the newer versions of the document. The 
interim NIPP was formalized in the 2009 National Infrastructure Protection Plan — 
Partnering to Enhance Protection and Resiliency. A significant change in the 2009 
version was the increased focus on the concept of resiliency and a three-pronged 
approach of deterring threats, mitigating vulnerabilities, and minimizing consequences 

(resiliency).27 

The Guide to Critical Infrastructure and Key Resources Protection at the State, 
Regional, Local, Tribal, and Territorial Level published in September 2008 defines Cl as 
“the assets, systems, and network that, if damaged, would result in significant 
consequences—where the degree of impact on economic security, public health and 
safety, public confidence, loss of life, or some combination of these adverse outcomes 
has been established through the criteria identified.”28 In describing the methodology for 
gathering information about Cl, the document explains, “some sectors include certain 
classes of assets, systems, or networks that are unlikely to be the target of an attack 
and/or are relatively inconsequential if attacked. These assets will not need to be 


24 Department of Homeland Security, Interim National Infrastructure Protection Plan (Washington, 
DC: Department of Homeland Security, 2005), 1, https://net.educause.edu/ir/library/pdf/csd3754.pdf 

25 Ibid. 

26 Ibid., 10. 

27 Department of Homeland Security, National Infrastructure Protection Plan—Partnering to 
Enhance Protection and Resiliency (Washington, DC: Department of Homeland Security, 2009), 7, 
http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf 

2^ Department of Homeland Security, A Guide to Critical Infrastructure and Key Resources Protection 
at the State, Regional, Local, Tribal, and Territorial Level (Washington, DC: Department of Homeland 
Security, 2008), 31, http://www.dhs.gov/xhbrary/assets/nipp_srtltt_guide.pdf 
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identified. ”29 It is an important assertion that all infrastrueture systems are not eritieal and 
should not be identified beeause not all infrastrueture faeilities are signifieant. 

The National Critical Infrastructure Prioritization Program (NIPP) ealled for 
developing a list of the nation’s “highest priority infrastructure” based on “effects of an 
event on public health and safety, and economic, psychological, and government mission 
impacts.”20 This analysis was consequence-based around five levels of impact. Following 
the Cl definitions from other federal documents. Level-1 and Level-2 infrastructure 
losses would have “nationally or multi-state significant loss of life, public health, 
economic, and/or national security impacts. 

D. CURRENT HOMELAND SECURITY POLICIES 

The 2013 National Infrastructure Protection Plan (NIPP) suggests that 
identifying Cl comes through “identifying the assets, systems, and networks that are 
essential to the continued operation, considering associated dependencies and 
interdependencies. The federal government identifies and prioritizes nationally 
significant Cl base upon statutory definition and national considerations.”22 According to 
the NIPP, risk should be managed by “understanding the criticality as well as the 
associated interdependencies of infrastructure. Lifeline functions such as 
communications, energy, transportation, and water are the most critical infrastructure 
sectors.”22 


29 Department of Homeland Seeurity, A Guide to Critical Infrastructure and Key Resources Protection 
at the State, Regional, Local, Tribal, and Territorial Level, 33. 

20 “About: Infrastructure Information Collection Division,” July 14, 2015, http://www.dhs.gov/about- 
infrastructure-information-collection-division. 

21 Harris County Office of Homeland Security and Emergency Management, Lessons Learned 
Information Sharing, Infrastructure Systems: Developing a Critical Infrastructure and Key Resources 
(CIKR) Plan (Houston, TX: Harris County Office of Homeland Security and Emergency Management, 

2014), 3, http ://www.readyharris.org/extemal/content/document/l 829/223 3 754/1/20140825%20LLIS 
ICKR.pdf 

22 Department of Homeland Security, National Infrastructure Protection Plan 2013—Partnering for 
Critical Infrastructure Security and Resilience (Washington, DC: Department of Homeland Security, 

2013), 16, http://www.dhs.gov/sites/default/files/pubhcations/NIPP%202013_Partnering%20for%20 
Critical%20Infrastructure%20Security%20and%20Resihence_508_0.pdf 

22 Ibid., 17. 
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Presidential Policy Directive 21—Critical Infrastructure Security and Resilience 
(PPD-21) released in February 2013 asserts, “the Nation’s eritieal infrastrueture provides 
the essential serviees that underpin Ameriean soeiety. Proaetive and eoordinated efforts 
are neeessary to strengthen and maintain seeure, funetioning, and resilient eritieal 
infrastrueture—ineluding assets, networks, and systems—that are vital to publie 
eonfidenee and the Nation’s safety, prosperity, and well-being.”34 A solution for seeuring 
infrastrueture is offered through developing resilienee, whieh will allow “eritieal 
infrastrueture to be seeure and able to withstand and rapidly reeover from all hazards.” 
Further, “all Federal department and ageney heads are responsible for the identilieation, 
prioritization, assessment, remediation, and seeurity of their respeetive internal Cl that 
supports primary mission essential funetions. Sueh infrastrueture shall be addressed in the 
plans and exeeution of the requirements in the National Continuity Pohoy.”33 The poliey 
ealls on “the Federal Government to work with Cl owners and operators to take proaetive 
steps to manage risk and strengthen the seeurity and resilienee of the Nation’s eritieal 
infrastrueture, eonsidering all hazards that eould have a debilitating impaet on national 
seeurity, eeonomie stability, publie health, and safety, or any eombination thereof.”3^ The 
requirements within PPD-21 emphasize that hazards to Cl must have a “debilitating” 
impaet on the nation.37 The doeument’s glossary defines 

the term eritieal infrastrueture, provided in seetion 1016(e) of the USA 
Patriot Aet of 2001 (42 U.S.C. 5195o(e)), as namely systems and assets, 
whether physieal or virtual, so vital to the United States that the ineapaeity 
or destruetion of sueh systems and assets would have a debilitating impaet 
on seeurity, national eeonomie seeurity, national publie health or safety, or 
any eombination of those matters.38 

Resilienee is a eoneept intereonneeted with IP. The 2013 NIPP Supplemental 
Tool: Incorporating Resilience into Critical Infrastructure Projects defines resilienee as 


34 The White House, Presidential Policy Directive—Critical Infrastructure Security and Resilience 
Presidential Policy Directive/PPD-21—Critical Infrastructure Security and Resilience. 

35 Ibid. 

36 Ibid. 

37 Ibid. 

38 Ibid. 
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“the ability to prepare for and adapt to ehanging eonditions and withstand and reeover 
from deliberate attacks, accident, or national occurring threats or incidents. Resilient 
infrastructure systems are flexible and agile and should be able to bounce back after 
disruption.”39 While the NIPP Supplemental Tool offers a list of recommendations for 
increasing the resilience of a Cl sector, recommendations like “conduct vulnerability 
assessments to identify known and future risks” and “build redundancy into infrastructure 
systems” are a far stretch from providing actionable recommendations for allowing 
facilities to “bounce back” following disruptions. The NIPP Supplemental Tool restates 
the factors contributing to Cl failures without offering solutions. 

Homeland Security Presidential Directive 7: Critical Infrastructure Identification, 
Prioritization, and Protection frames infrastructure facilities that must be protected as the 
sites that “threaten national security, cause mass casualties, weaken our economy, and 
damage public morale and confidence.” The Cl facilities provide the “essential services 
that underpin American society. ”40 

Cl is also a topic within the 2014 Quadrennial Homeland Security Review 
(QHSR). In the context of natural disasters, the loss of Cl causes “widespread disruptions 
of essential services across the country.”4i The QHSR states that Cl provides “essential 
services that underpin the American way of life” and “interconnected infrastructure 
consists of multiple systems that rely on one another to greater degrees for their 
operation.”42 Following the same concepts as the 2013 NIPP, the QHSR suggests 
infrastructure that is “more reliable, efficient, and resilient”43 and that can be a solution to 
protecting the delivery of essential services. 

39 Department of Homeland Security, Supplemental Tool: Incorporating Resilience into Critical 
Infrastructure Projects (Washington, DC: Department of Homeland Security, 2013), 1, http://www.dhs. 
gov/sites/default/fdes/publications/NIPP%202013%20Supplement_Incorporating%20Resilience%20into% 
20CI%20Proj ects_50 8 .pdf 

The White House, Homeland Security Presidential Directive 7: Critical Infrastructure 
Identification, Prioritization, and Protection. 

Department of Homeland Security, The 2014 Quadrennial Homeland Security Review (Washington, 
DC: Department of Homeland Security, 2014), 22, http://www.dhs.gov/sites/default/files/publications/2014 
-qhsr-final-508.pdf 

42 Ibid., 23. 

43 Department of Homeland Security, The 2014 Quadrennial Homeland Security Review, 24. 
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Executive Order 13636—Improving Critical Infrastructure Cybersecurity 
published in 2013 follows a similar definition as the USA PATRIOT Aet by stating that 
the loss of Cl has “a debilitating impaet on seeurity, national economie security, national 
public health or safety, or any combination of those matters.”^4 Section 9 specifies that 
efforts should be focused on the Cl systems that cause catastrophic national or regional 
impacts. 

E. PEER-REVIEWED WRITING ON CRITICAL INFRASTRUCTURE 

Peer reviewed articles on Cl utilize the same general definition that Cl is the 
interconnected systems that can have debilitating impacts to the nation if they fail. 

In studying the cascading impacts of infrastructure failure. Cl is defined as the 

complex systems of components that ensure production, transport, 
communication, health, safety, and any other activities necessary for a 
society’s (country’s) needs. Its disruption or destruction would affect the 
teams working at these complexes, the surrounding structures, public 
health and safety, the economy, and national security.45 

Interdependency between Cl systems is used as a basic assumption for in-depth 
analysis of systems. A risk analysis approach to studying Cl focused on the “rippling 
effect of hazardous disturbances (such as natural or willful hazards) to any Cl can be far- 
reaching and long-lasting. This forms a cascading effect, which may be far greater than 
the initial loss inflicted by the direct disturbance.”46 

An analysis of engineering resilience into physical facilities defined Cl as 
“significant pieces of plant and equipment, such as power stations and motorways. High 
population densities in cities, and the increasing interconnectedness of the services and 


44 Exec. Order No. 13636—Improving Critical Infrastructure Cybersecurity (2013), 3, littp://www. 
gpo .go v/fdsys/pkg/FR-2013-02-19/pdf/2013 -03 915 .pdf. 

45 Farid Kadri, Bibiga Birregah, and Eric Chatelet, “The Impact of Natural Disasters on Critical 
Infrastructures: A Domino Effect-based Study,” Journal of Homeland Security and Emergency 
Management 11, no. 2 (2014): 217-241, http://dx.doi.org/10.1515/jhsem-2012-0077. 

46 Pu Jiang and Yacov Y. Haimes, “Risk Management for Leontief-based Interdependent Systems,” 
Risk Analysis 24, no. 5 (2004): 1215-1229, http://dx.doi.Org/10.llll/j.0272-4332.2004.00520.x. 
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supply chains that sustain them. ”47 A study of engineering resilient transportation 
systems proposed that transportation infrastrueture that would eause debilitating impaets 
should be reengineered to be durable to lessen the impact from natural disasters .48 A 
similar analysis of security for physical facilities defined Cl as the “infrastructures are so 
vital that ineapacity would have far-reaehing and debilitating effeets on the United States 
and her allies.”49 

Joseph’s artiele “Critieal Business Elements and Key Assets” identifies the 
additional ehallenge that federal poliey does not provide speeifie guidelines for 
determining eritieality. “The seope and eomplexity of Cl seetors ean make this a daunting 
task to identify whieh speeifie assets are eritieal. Most of these guidelines do not provide 
speeifie basis for determining ‘eritieality’ in the broader eeonomic or soeial welfare 
impaets as ealled for in federal eritieal infrastrueture strategies.”^*’ 

F. ANALYSIS OF IMPLICATIONS OF Cl DEFINITIONS 

Federal government reports, plans, policies, and directives from the 1980s to 
today, emphasize that Cl is the intereonneeted systems that ean eause debilitating impaets 
to the safety and seeurity of the nation if they are destroyed by natural disasters or 
terrorism. Seholarly studies of Cl use the same definitions for framing their analysis of 
the topie. 

As demonstrated by Table 1,13 overarehing federal government policies released 
over the past 19 years eonsistently deseribe Cl as being nationally signifieant, providing 
vital serviees, being part of an intereonneeted system, eausing debilitating impaets if 


47 Christopher D. F. Rogers et ah, “Resistance and Resilience-Paradigms for Critical Local 
Infrastructure,” Proceedings of the Institution of Civil Engineers: Mechanical Engineering 165, no. 2 
(2012): 73-83, http://search.proquest.com/docview/1223110482?accountid=12702. 

48 Institute of Transportation Engineers, “Ahead of the Storm: Engineering for Disaster,” ITE Journal, 
2013, http://search.proquest.com/docview/1468925507?accountid=12702. 

49 Lee Parrish and Mark Leary, “Secure Global Collaboration among Critical Infrastructures,” 
Information Security Journal: A Global Perspective 18, no. 2 (2009): 57-63, http://search.proquest.com/ 
docview/743437113 ?accountid=12702. 

Anthony Joseph, “Critical Business Elements and Key Assets,” Security 43, no. 8 (2006): 40-41, 
http://search.proquest.com/docview/197794745?accountid=12702. 
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destroyed, and providing a serviee neeessary to the health and safety of the general 
publie. 


Table 1. Analysis of Definitions of Critieal Infrastrueture 


Year 

Document 

Nationally 

Significant 

Provide 

Vital 

Service 

Interdependent 

System 

Debilitating 

Impact 

Safety 

of 

Public 

2014 

Quadrennial 
Homeland 
Security Review 

X 

X 

X 

X 

X 

2013 

NIPP 

X 

X 

X 


X 

2013 

PPD-21: Cl 

X 

X 

X 

X 

X 

2013 

Executive Order 

13636 

X 

X 

X 

X 

X 

2011 

NCIPP Level 

1/Level 2 

Program 

X 

X 

X 

X 

X 

2009 

NIPP 

X 

X 

X 

X 

X 

2008 

NIPP SRTLTT 

Guide 

X 

X 

X 

X 

X 

2007 

National 

Security 

Strategy^ 1 

X 

X 

X 

X 

X 

2005 

Interim NIPP 

X 

X 

X 

X 

X 

2003 

HSPD7 

X 

X 

X 

X 

X 

2001 

USA PATRIOT 

Act 

X 

X 

X 

X 

X 

1998 

PDD/NSC-63 

X 

X 

X 

X 

X 

1996 

Executive Order 

13010 

X 

X 


X 

X 

1988 

Congressional 
Budget Office 
Report 

X 

X 





DHS eurrently provides a wide-ranging list of faeilities within 16 different seetors 
that are eonsidered to be eritieal.^^ emphasis on national signifieanee, vital serviees, 
interdependent systems, debilitating impaets, and safety of the publie in eaeh prominent 


Homeland Security Council, National Strategy for Homeland Security, 27. 

“Critical Infrastructure Sectors,” June 12, 2014, http://www.dhs.gov/critical-inffastructure-sectors. 
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Cl definition show a consensus in the definition of the term. An agreed upon definition of 
what is critical allows for the interpretation of what is not CL 

G. CRITICAL INFRASTRUCTURE SECTORS 

Presidential Policy Directive 21: Critical Infrastructure Security and Resilience 
identifies 16 different sectors^^ into which Cl facilities are organized. These sectors and 
various subsectors, components, industries, segments, and disciples include: 

• Chemical Sector 

• Basic Chemical Component 

• Specialty Chemical Component 

• Agricultural Chemical Component 

• Pharmaceuticals Component 

• Consumer Products Component 

• Commercial Facilities Sector 

• Public Assembly Subsector 

• Sports Leagues Subsector 

• Gaming Subsector 

• Lodging Subsector 

• Outdoor Events Subsector 

• Entertainment and Media Subsector 

• Real Estate Subsector 

• Retail Subsector 

• Communications Sector 

• Critical Manufacturing Sector 

• Primary Metal Manufacturing Industry 

• Machinery Manufacturing Industry 

• Electrical Equipment, Appliance, and Component Manufacturing 
Industry 


The White House, Presidential Policy Directive—Critical Infrastructure Security and Resilience 
Presidential Policy Directive/PPD-21—Critical Infrastructure Security and Resilience. 


17 




54 


• Transportation Equipment Manufacturing Industry 

• Dams Sector 

• Defense Industrial Base Sector 

• Emergency Services Sector 

• Eaw Enforcement Discipline 

• Eire and Emergency Services Discipline 

• Emergency Management Discipline 

• Emergency Medical Services Discipline 

• Public Works Discipline 

• Energy Sector 

• Electricity Segment 

• Petroleum Segment 

• Natural Gas Segment 

• Pood and Agriculture Sector 

• Government facilities Sector 

• Healthcare and Public Health Sector 

• Information Technology Sector 

• Nuclear Reactors, Materials, and Waste Sector 

• Transportation Sector 

• Aviation Subsector 

• Highway Infrastructure and Motor Carrier Subsector 

• Maritime Transportation System Subsector 

• Mass Transit and Passenger Rail Subsector 

• Pipeline System Subsector 

• Preight Rail Subsector 

• Postal and Shipping Subsector 

• Water and Wastewater Systems Sector^^ 

'Critical Infrastructure Sectors.” 
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H. COMMERCIAL FACILITIES SECTOR 


A sector that can serve as an example for how to re-categorize facilities currently 
designated as critical is the CF sector. The mission of protecting the CF sector presented 
in the 2010 NIPP Sector Specific Plan (SSP)—Commercial Facilities lacks emphasis on 
“essential-to-life services” referenced in other descriptions of CL The sector’s mission 
also lacks emphasis on debilitating economic damage to the nation, and instead, focuses 
on the operations of individual businesses: 

The Commercial Facilities Sector envisions a secure, resilient, and 
profitable sector in which effective and non-obstructive risk management 
programs instill a positive sense of safety and security in the public and 
sustain favorable business environments that are conducive to attracting 
and retaining employees, tenants, and customers. 

The emphasis on resilience, openness, and private sector profitability does not 
suggest that critical functions are being carried out, and the loss of those functions would 
result in debilitating impacts to the nation, rather than losses to individual private sector 
corporations. While Cl systems can be mapped to key nodes causing failure across 
multiple systems, the CF sector supplement section on prioritizing infrastructures states 
that it does “not believe it is appropriate to develop a single overarching prioritized list of 
assets for the Commercial Facilities Sector. Instead, assets are categorized using a 
consequence methodology that allows the Commercial Facilities Sector Specific 
Agencies to drive sector-wide protection efforts.Further showing the lack of 
interconnected systems within the CF sector, “individual owners and operators apply 
effective implementation and evaluation of protective programs and resilience 
strategies. 

The National Infrastructure Protection Plan—Commercial Facilities Sector 
Specific Plan uses dollar figures and statistics to attempt to show the national importance 
of the CF sectors. Examples, such as “the retail industry generates $4.6 trillion in annual 

Department of Homeland Security, Commercial Facilities Sector-Specific Plan an Annex to the 
National Infrastructure Protection Plan 2010 (Washington, DC: Department of Homeland Security, 2010), 
http://www.dhs.gOv/xlibrary/assets/nipp-ssp-commercial-facilities-2010.pdf 

56 Ibid., 3. 

57 Ibid. 
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sales” and “35 million Americans work in office buildings,are attempts to show the 
national implications of losses to the sector but CF are not a single entity. An attack or 
multiple attacks on CF would not result in massive losses across the entire sector. The 
document cites, “1.6 million U.S. retail establishments that employ 24 million 
Americans.” If simultaneous terrorist attacks destroyed 100 different retail establishments 
with each business having $10 million in annual revenue (well above the national 
average^^), the losses would be less than .04% of the entire retail industry’s annual total 
revenue ($1 billion in losses compared with $4.6 trillion in annual revenue). 

The vulnerability of the facilities in the sector is attributed to the number of 
people occupying the buildings rather than the importance of the actual structures: 

The CF Sector is one of the few CIKR sectors that terrorists have attacked 
successfully. Commercial facilities are especially vulnerable due to the 
large inventory of buildings across the Nation that are open to the public 
and are populated by large numbers of people on a daily basis. 
Commercial facilities are designed to be welcoming and attractive to 
customers and can be contrary to design security principals.^*’ 

The factors used to assess the criticality of CF are not based around performance 
measures that relate to providing essential-to-life functions or measures impacting 
national economic security. As a counter example, the energy sector measures ability to 
deliver power to customers. The CF sector uses attributes, such as the “height of 
building” and “number of rooms,” as measures of importance but neither of these factors 
direct measures of criticality of the facility. An electric power plant measures its 
performance in megawatts of power produced not by the height of the smoke stack, 
which is just a physical attribute of the facility. Within CF, a higher number of rooms do 
not mean that the facility is always fully occupied or more critical than a smaller 
building. The factors listed as the “attributes of interest” for the CF sector are seemingly 


Department of Homeland Security, Commercial Facilities Sector-Specific Plan an Annex to the 
National Infrastructure Protection Plan 2010, 7. 

“Small Business Overview,” 2015, http://asq.org/leam-about-quality/small- 
business/overview/overview.html. 

Department of Homeland Security, Commercial Facilities Sector-Specific Plan an Annex to the 
National Infrastructure Protection Plan 2010, 8. 
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arbitrary to the function of facility. These arbitrary attributes of interest identified within 
the CF sector plan include; 

• Facility Location: General geographic situation (e.g., financial district, 
industrial park). 

• Facility Proximity: Proximity to high-risk enterprises (e.g., adjacency to 
an iconic landmark or important federal building). 

• Facility Size: Height, footprint, number of floors, hotel rooms, apartments, 
public areas, and exhibition/retail space. 

• Facility Capacity/Attendance; Design population annual attendance (e.g., 
the number of tenants in an office building, spectators at a sporting event, 
and visitors/participants at an outdoor event). 

• Facility Type: Purpose or use of the facility (e.g., office building, stadium, 
hotel, amusement park). 

• Geographical Area: Defined by local government, it includes prestigious 
commercial (e.g., retail, hotels, and office buildings) and residential assets 
that are nationally recognized as a tourist destination and unified economic 
entity. 

• Facility Functions: Types of events held in the facility (e.g., national 
sporting events, political conventions, and controversial exhibitions). 

• Facility Value: Iconic and economic status of the facility (e.g., historical 
status, owner, tenants, and clientele).^! 

Regulatory agencies were developed more than 100 years ago to protect 
consumers, the government, and the economic stability of the United States from 
mismanagement of essential services (manufacturing, banking, transportation, etc.).^2 
“The commercial facilities sector is considered a non-regulatory sector” and has “no 
obligations that require owners to disclose information to the government.”^^ while this 
lack of regulation can seemingly be a barrier to IP, it is also an indication of the lack of 
criticality within the sector due the historic absence of government interest and oversight. 


Department of Homeland Security, Commercial Facilities Sector-Specific Plan an Annex to the 
National Infrastructure Protection Plan 2010, 20. 

® “A Brief History of Administrative Government,” 2015, http://www.foreffectivegov.org/node/3461. 

Department of Homeland Security, Commercial Facilities Sector-Specific Plan an Annex to the 
National Infrastructure Protection Plan 2010, 30. 
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1. CONCLUSION 

Federal government documents over the past 35 years have a consensus in their 
definition of Cl being the systems and assets that are nationally significant and the 
facility losses result in debilitating consequences to the safety and security of the United 
States. Based on this analysis of the literature, infrastructure that lacks national 
significance, criticality, and interconnectedness of other infrastructure systems does not 
meet the definition of “critical infrastructure.” It represents a discrepancy between the 
federal policies that define Cl and how DHS currently views infrastructure facilities. 
While DHS takes an all-inclusive approach to include as many facilities as possible under 
the designation as “critical,” Cl has consistently been defined as only the systems that are 
nationally significant. This problem is apparent when looking at the CF sector due to the 
measures of critically that relate to physical attributes of the facilities and do not relate to 
nationally significant essential-to-life services or maintaining economic security. 

To challenge the current Cl protection policies relating to CF further, case studies 
of the World Trade Center (WTC) and the Las Vegas Strip challenge general assertions 
of the negative economic impact occurring after the destruction of a “critical” 
commercial facility. A case study of the 2014 toxic chemical spill into the primary water 
source serving Charleston, WV also provides an example that is contrary to the concept 
that the loss of a facility serving as sole provider of an essential-to-life service results in 
debilitating impacts across all infrastructure sectors within a local area. 
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III. WHAT ARE THE PROBLEMS WITH CURRENT DHS 
CRITICAL INERASTRUCTURE POLICIES? 


As demonstrated in the literature review, numerous federal government 
doeuments eome to a eonsensus in their definition of Cl as a faeility that serves as a 
single or substantial provider of an essential funetion or serviee intereonneeted to other 
infrastrueture systems. The problem with DHS polieies is that many faeilities do not meet 
this definition but are still eonsidered to be “eritieal infrastrueture.” The origin of this 
issue may stem from the direetive for DHS to develop a list of all the eritieal faeilities 
around the eountry. Creating a national list of assets aeross 16 sectors of infrastructure 
resulted in a generally inclusive approach to identifying facilities. 

A. NATIONAL ASSET DATABASE 

Subtitle A of title II of the Homeland Security Act of 2002 created the NADB to 
categorize and prioritize Cl facilities across the country. The first DHS Infrastructure 
Protection Risk Management Division list identified 160 nationally critical sites. 

The 2007 Department of Homeland Security Authorization Act Sec. 704 directs 
the Secretary of Homeland Security^^ to: 

(A) Maintaining a catalog of the Nation’s most at risk infrastructure in a 
single repository of national assets known as the National Asset Database, 
and use such database in the development, coordination, integration, and 
implementation of plans and programs, including to identify, catalog, 
prioritize, and protect critical infrastructure and key resources in 
accordance with Homeland Security Presidential Directive-7, and in 
cooperation with all levels of government and private sector entities that 
the Secretary considers appropriate; and 


Office of Inspector General, Progress in Developing the National Asset Database. 

United States Congress, Committee Reports 109th Congress (2005-2006) House Report 109-713 — 
Part 1 (Washington, DC: The Library of Congress, Thomas, 2007), http://thomas.loc.gov/cgi-bin/cpquery/? 
&sid=cpl09alJsu&r_n=hr713pl.l09&dbname=cpl09&&seHTOC_192496&. 
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(B) Consulting the National Asset Database, along with other appropriate 
resourees, in providing any eovered grant to assist in preventing, redueing, 
mitigating, or responding to a terrorist attaek.®® 

The Authorization Aet also tasked the DHS Seeretary to provide an annual report 
of the “extent to which the database has been used as a tool for allocating funds to 
prevent, reduce, mitigate, and respond to terrorist attacks.According to the DHS 
Office of Inspector General’s (OIG’s) report Progress in Developing the National Asset 
Database, 77,069 critical assets were designated in 2006. See Figure 1.®^ 


Figure 1. National Asset Database Growth 2003-2006 



From Office of Inspector General, Progress in Developing the National Asset Database 
(OIG-06-40) (Washington, DC: Department of Homeland Security, 2006), http://www. 
oig.dhs.gOv/assets/Mgmt/OIG_06-40_Jun06.pdf 


CF and government facilities account for nearly 40% of the nationally designated 
critical facilities. The original criteria for the July 2004 DHS data call provided the 
guidance for identifying facilities as Cl quantified critical CF as “commercial centers 
with potential economic loss impact of $10 billion or capacity of more than 35,000 


United States Congress, Committee Reports 109th Congress (2005-2006) House Report 109-713 — 

Part 1 

67 Ibid. 

6^ Office of Inspector General, Progress in Developing the National Asset Database. 
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individuals.” While those numbers may seem signifieant, $10 billion dollars in loses is 
not nationally significant in a $2.4 trillion economy, and 128 different universities have 
division football programs playing in stadiums with capacities over 35,000 individuals. 

It seems unlikely that the football stadium at every large university is an infrastructure 
facility that is essential to the nation. These broad criteria for the NADB likely were the 
reason the number of critical facilities grew so rapidly. See Figure 2. 


Figure 2. National Asset Database Totals by Sector 



Agriculture & Food (7,542) 


Energy (7,889) 


Public Health 


Government Facilities (12,019) 


Transportation (6,141) 

(3,842) 

Telecommunications (3,020) 

Chemical & Hazardous 
Materials (2,963) 

Services (2,420) 
(2,029) 

Technology (757) 
Banking & Finance (669) 
Postal & Shipping (417) 
National Monuments & Icons 
(224) 

Power Plants (178) 
Defense Industrial Base (140) 
Not Specified (290) 

Commercial Assets (17,327) 


From Office of Inspector General, Progress in Developing the National Asset Database 
(OIG-06-40) (Washington, DC: Department of Homeland Security, 2006), http://www. 
oig.dhs.gOv/assets/Mgmt/OIG_06-40_Jun06.pdf 


The DHS Inspector General concluded that the NADB contained “many unusual 
or out-of-place assets whose criticality is not readily apparent, and too few assets in 
essential areas and may represent an incomplete picture.” The assets in question included 
“4,055 malls, shopping centers, and retail outlets, 224 racetracks, 539 theme parks and 
163 water parks, 1,305 casinos, 234 retail stores, 514 religious meeting places, 127 gas 


“Current United States GDP,” 2015, http://data.worldbank.org/indicator/NY.GDP.MKTP.CD. 

“Current NCAA Division 1 Football Teams,” 2010, http://www.databasefootball.com/College/ 
teams/teamlist.htm. 
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stations, 130 libraries, 4,164 educational facilities, 217 railroad bridges, and 335 
petroleum pipelines.”^! 

How did DHS end up with so many facilities on the NADB list? The broad scope 
of the IP mission, selection criteria that are below the threshold for national significant, a 
$4 billion annual program budget that needed to be spent, and lack of measureable 
criteria of assessing risk, protection, and performance, were likely contributing factors to 
the problem. Another likely source of the problem is the reliance of DHS on facilities to 
self-assess risk. 

B. OVERESTIMATION OF RISK DURING VULNERABILITY 

ASSESSMENTS OF FACILITIES 

The September 2014 United States GAO Report to Congressional Requesters — 
Critical Infrastructure Protection: DHS Action Needed to Enhance Integration and 
Coordination of Vulnerability Assessment Efforts provides a laundry list of issues the 
department is having with assessing and documenting risks to Cl facilities. DHS has “not 
consistently captured and maintained data, is not positioned to manage an integrated and 
coordinated government approach for assessments called for in the NIPP, and current 
efforts potentially are potentially duplicative or leave gaps among the Cl [facilities] 

assessed.”’72 

It should be noted that while a wide variety of risks arise from natural disasters 
and Internet-based cyber disruptions, the DHS assessments focus on physical 
vulnerabilities to a terrorist attack on a facility that can be lessened by protective 
measures including the presence of a security force, access control, or perimeter 
barriers.^3 of the 10 DHS vulnerability assessment tools, all 10 have questions relating to 
vulnerability to intentional attacks but only two of the 10 have assessment criteria 


John Moteff, Critical Infrastructure: The National Asset Database (CRS Report Order Code 
RL33648) (Washington, DC: Congressional Research Service, 2007), 1-7. 

Government Accountability Office, Critical Infrastructure Protection DHS Action Needed to 
Enhance Integration and Coordination of Vulnerability Assessment Efforts. 

Ibid., 4. 
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relating to “vulnerability to all-hazards,” such as hurricanes and earthquakes.^^ See 
Figure 3. 


Figure 3. GAO Comparison of Selected Areas Included in the Department of 
Homeland Security Vulnerability Assessment Tools and Methods 
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✓ 

✓ 

✓ 

✓ 

✓ 

✓ 

✓ 
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Source GAO anatysis of OHS documents | GAO-t4-S07 


From Government Aeeountability Office, Critical Infrastructure Protection DHS Action 
Needed to Enhance Integration and Coordination of Vulnerability Assessment Efforts 
(GAO-14-507) (Washington, DC: U.S. Government Accountability Office, 2014), 19, 
http://www.gao.gov/assets/670/665788.pdf 


The Homeland Security Act of 2002 required DHS to conduct vulnerability 
assessments to assess and prioritize Cl facilities. The GAO found that between 2011 and 
2013, DHS conducted thousands of vulnerability assessments but the department is not 
equipped to integrate the various assessments to identify priorities.with more than 
70,000 Cl facilities across the country, DHS also relies on facilities to self-assess risk 
with tools, such as the DHS IP Risk Self-Assessment Tool, which relies on the facility 


Government Accountability Office, Critical Infrastructure Protection DHS Action Needed to 
Enhance Integration and Coordination of Vulnerability Assessment Efforts, 18. 

Government Accountability Office, Critical Infrastructure Protection DHS Action Needed to 
Enhance Integration and Coordination of Vulnerability Assessment Efforts. 
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operator to decide the threat rating, vulnerability, hazards, and vulnerabilities.^^ Between 
October 2010 and September 2014, GAO found that facility operators submitted 7,600 
self-assessments of facilities to DHS.^^ The Environmental Protection Agency offers the 
Vulnerability Self-Assessment Tool (VSAT) 6.0 to allow water and wastewater facilities 
to determine quantitative risk and resilience metrics, asset prioritization, and threats. 
Unfortunately, people are generally very poor at self-assessing. 

People are generally over optimistic and overconfident with self-assessments. 
Poor self-assessment skills also apply to people with specialized knowledge who should 
be well qualified to make informed decisions. In an experiment with Masters of Business 
Administration (MBA) students (who have knowledge of statistics and standard 
distribution), a group was asked to predict the final grades in the course. With a standard 
distribution, 50% will be above and below the average with only 10% in the top decile. 
The results of the survey showed that a majority of students placed themselves in the 
highest or second highest decile, and only 5% placed themselves in the bottom 50 %. 
Even a group of students who should be well informed about standard distribution of 
grades, completely failed to predict their performance accurately in a course that shows 
the weakness in people’s self-assessment skills. This phenomenon of poor assessment is 
known as the “optimism bias.” 

The optimism bias extends beyond MBA students. People under estimate their 
risk for car accidents, think the chances of divorce are low, and expect to receive future 
promotions, gain wealth beyond current means, and possess a superior intellect to 


Department of Homeland Security, Commercial Facilities Risk Self-Assessment Tool (Washington, 
DC: Department of Homeland Security, 2012), http://www.ahla.com/uploadedFiles/RSAT%20Fact%20 
Sheet_05172012.pdf 

Government Accountability Office, Critical Infrastructure Protection DHS Action Needed to 
Enhance Integration and Coordination of Vulnerability Assessment Efforts, 13. 

“Vulnerability Self Assessment Tool (VSAT) 6.0,” September 4, 2014, http://water.epa.gov/infra 
structure/watersecurity/techtools/vsat.cfm. 

Richard H. Thale and Cass R. Sunstein, Nudge: Improving Decisions about Health, Wealth, and 
Happiness (New Haven, CT: Yale University Press, 2008), 20. 
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others.^*’ Optimism bias is evident in compulsive gamblers who will consistently 
overestimate the probability of winning high-risk bets.^i 

The DHS Critical Infrastructure Protection Program hinges on assessing the risks 
and vulnerabilities to infrastructure facilities and prioritizing the protection of the most 
vulnerable ones. It creates an incentivized system in which the facilities that are 
determined to have the highest risk become the facilities with the most resources (and 
considered to be the most important). Just as an MBA student has a personal desire to 
receive a high grade or a gambler is motivated by a reward, a facilities manager 
conducting a risk self-assessment will likely be subconsciously biased to assess greater 
risks than actually exist. This problem can be exacerbated by inconsistent methods of 
assessing and documenting risk. DHS provides 10 different risk assessment tools that 
each vary in length, depth, and content as show in Table 3 from the GAO report that is 
presented in Figure 4. 


Tali Sharot, “The Optimism Bias,” Science Direct, 21, no. 23 (2011): R941-R945, 
http://www.sciencedirect.eom/science/article/pii/S0960982211011912. 

“Pathological Gambling Caused by Excessive Optimism,” April 29, 2013, http://www.sciencedaily. 
com/releases/2013/04/130429102400.htm. 
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Figure 4. Length of Department of Homeland Seeurity 

Vulnerability Assessment Tolls and Methods 
(Number of Pages and Questions), by Type 


Vulnerability assessment 
tool or method 

DHS office or 
component 

Number 
of pages 

Minimum number 
of questions 

Infrastructure Survey Tool 
(1ST) 

National Protection 
and Programs 
Directorate (NPPD) 

296 

More than 100® 

Site Assistance Visit (SAV) 

NPPD 

253 

More than 100® 

Chemical Security 
Assessment Tool Security 
Vulnerability Assessment 
(CSAT SVA) 

NPPD 

107 

More than 100® 

Modified Infrastructure 
Survey Tool (MIST) 

NPPD 

165 

More than 100® 

Joint Vulnerability 
Assessment (JVA) 

Transportation Security 
Administration (TSA) 

57“ 

More than 100® 

Baseline Assessment for 
Security Enhancements 
(BASE) 

TSA 

14 

205 

Pipeline Security Critical 
Facility Security Review 
(CFSR) 

TSA 

21 

166 

Freight Rail Risk Analysis 
Tool 

TSA 

1 

17 

Port Security Assessment 

Coast Guard 


16 

Maritime Transportation 
Security Act (MTSA)® 

Coast Guard 

Not 

applicable 

Not applicable 


Source GAO analysis of DHS documents. | GAO-14-507 


From Government Accountability Office, Critical Infrastructure Protection DFIS Action 
Needed to Enhance Integration and Coordination of Vulnerability Assessment Efforts 
(GAO-14-507) (Washington, DC: U.S. Government Accountability Office, 2014), 17, 
http://www.gao.gov/assets/670/665788.pdf 


An objeetive method for assessment should remove as many subjective measures 
as possible, but the GAO report found “differences in the detail of information collected 
in individual areas making it difficult to determine the extent to which the information 
collected was comparable [to other facilities] and what assumptions or judgments were 
used while gathering assessment data.”^2 Some risk assessment tools use “yes/no” 
questions, while others have drop down menus of options and open-ended narratives. 


Government Accountability Office, Critical Infrastructure Protection DHS Action Needed to 
Enhance Integration and Coordination of Vulnerability Assessment Efforts, 20. 
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Once a facility is designated as a “critical infrastructure,” or receives resources 
from the government, the facility manager is likely to become “loss adverse” to giving up 
those resources or the prestige of the designation when conducting future risk 
assessments. Along the lines of being adverse to loss, people will disproportionally 
decide to stick with a current decision rather than make a change. People will stay with a 
retirement plan or health care policy even if more attractive alternatives are available, and 
this same thinking likely applies to a facility manager determining risks and 
vulnerabilities to a facility.83 “status quo bias” may contribute to a facility that has 
been assessed as having a risk or vulnerability, reporting that same high level of risk in 
future assessments even if the risk or vulnerability has actually decreased.^^ 

While it is unrealistic for DHS to assess all Cl facilities, the lack of consistency in 
self-assessment tools and the likelihood for errors in self-assessment creates unreliable 
results. The problem is compounded because GAO found that “it is unclear what areas 
DHS believes should be included in a comprehensive vulnerability assessment.” GAO 
reports, “DHS is not in a position to integrate assessments conducted or required by 
components within DHS to identify priorities for protective and supportive measures 
regarding threats to the nation or to support national-level comparative risk 
assessments. 

C. LOTS OF MONEY AND FEW MEASURABLE RESULTS 

The 2014 National Protection Framework^^ defined Cl protection as 

protecting the physical and cyber elements of critical infrastructure. This 
includes actions to deter the threat, reduce vulnerabilities, or minimize the 
consequences associated with a terrorist attack, natural disaster, or 

William Samuelson and Richard Zeckhauser, “Status Quo Bias in Decision Making,” Journal of 
Risk and Uncertainty J Risk Uncertainty, 1 (1988): 7-59. http://www.hks.harvard.edu/fs/rzeckhau/SQB 
DM.pdf 

Thale and Sunstein, Nudge: Improving Decisions about Health, Wealth, and Happiness, 34. 

Government Accountability Office, Critical Infrastructure Protection DHS Action Needed to 
Enhance Integration and Coordination of Vulnerability Assessment Efforts, 24. 

86 Federal Emergency Management Agency, National Protection Framework First Edition 
(Washington, DC: Department of Homeland Security, 2014), http://www.fema.gov/media-library- 
data/1406717583765-996837bf788e20e977eb5079f4|174240/FINAL_National_Protection_Framework_ 
20140729.pdf 
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manmade disaster. Critieal Infrastrueture Protection is an element of 
critical infrastructure security and resilience as detailed in Presidential 
Policy Directive 21: Critical Infrastructure Security and Resilience 

While the mission is defined, the goals of the mission remain unclear. The 2013 
National Infrastructure Protection Plan Supplemental Tool states, “goals and objectives 
are likely to vary across sectors and organizations depending on the risk landscape, 
operating environment, and composition of a specific industry, resource, or other aspect 
of critical infrastructure.”^^ 

Even with undefined goals, IP is a $72 billion market that is expected to double to 
$114 billion by 2019 according to a Security Technology market analysis prediction.89 
The DHS National Protection and Programs Director was budgeted $2.5 billion in 2013 
with additional resources for IP also included in FEMA’s $10.6 billion, FEMA Grants 
Program’s $2.3 billion, and DHS Science & Technology’s $668 million budgets.All 
this funding equates to an enormous amount of federal resources being dedicated to the 
Cl protection mission, as shown in Figure 5. 


Federal Emergeney Management Ageney, National Protection Framework First Edition, 9. 

Federal Emergeney Management Ageney, National Protection Framework First Edition. 

89 “Press Release: Critieal Infrastrueture Proteetion Market Worth $ 114.30 Billion by 2019,” 2015, 
http://www.marketsandmarkets.eom/PressReleases/eritieal-infrastmeture-proteetion-eip.asp. 

9*^ Department of Flomeland Seeurity, FY2013 Budget in Brie/(Washington, DC: Department of 
Flomeland Seeurity, 2013), http://www.dhs.gov/xlibrary/assets/mgmt/dhs-budget-in-brief-fy2013.pdf 
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Figure 5. Funding for the Infrastructure Protection and Information Security 

Program (in millions of dollars) 


Program 

Project Activity 

FY2013 
Enacted 
(pre- 

sequestor) 

FY20I4 

Request 

FY20I4 

House 

Passed 

FY20I4 

Senate 

Reported P.L. 

1 13-76 

Infrastructure Protection 

$260 

$261 

$261 

$273 

$263 

Identification, Analysis, and Planning 

59 

58 

66 

66 

63 

Sector Management and Governance 

67 

60 

60 

65 

63 

Regional Field Operations 

56 

57 

57 

57 

57 

Infrastructure Security Compliance 

78 

86 

77 

86 

81 

Cybersecurity 

756 

810 

786 

804 

792 

Cybersecurity Coordination 

4 

4 

4 

4 

4 

US-CERT Operations 

93 

103 

102 

102 

102 

Federal Network Security 

236 

200 

200 

200 

200 

Network Security Deployment 

329 

406 

382 

393 

382 

Global Cybersecurity Management 

26 

19 

19 

26 

26 

Critical Infrastructure Cyber Protection and 
Awareness 

63 

73 

73 

73 

73 

Business Operations 

6 

5 

5 

5 

5 

Communications 

140 

131 

130 

132 

131 

Office of Emergency Communications 

39 

37 

36 

38 

37 

Priority Telecommunications Services 

53 

53 

53 

53 

53 

Next Generation Networks 

24 

21 

21 

21 

21 

Programs to Study and Enhance 
Telecommunications 

13 

10 

10 

10 

10 

Critical Infrastructure Protection 

II 

9 

9 

9 

9 

Total, Infrastructure Protection and 

1 158 

1,202 

1,177 

1,209 

1,187 


Information Security 

Source: CRS analysis of P.L 113-6, its accompanying Senate explanatory statement, P.L 113-2, the FY20I4 DHS 
Congressional Budget Justifications, H.R.22I7, H.Rept. 113-91 and S.Rept. 113-77,and Explanatory Text for H.R. 
3547, Division F. 

From John D. Moteff, Critical Infrastructures: Background, Policy, and Implementation 
(CRS Report No. RL30153) (Washington, DC: Congressional Research Service, 2015), 
https://www.fas.org/sgp/crs/homesec/RL30153.pdf. 


In response to 2006 and 2011 efforts by Congress and GAO to determine the cost- 
benefit of current Cl protection programs, GAO issued the 2013 report Critical 
Infrastructure: Assessment of the Department of Homeland Security’s Report on the 
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Results of Its Critical Infrastructure Partnership Streamlining EffortsP^ According to the 
report; 


In 2011, a report of the Senate Committee on Appropriations 
accompanying H.R. 2017—the fiseal year 2012 spending bill for DHS— 
noted that the department’s budget request stated that NPPD would 
streamline various methods and processes for coordination and 
information sharing with industry partners through NIPP management, 

Critical Infrastructure and Key Resourees eoordination, and SSA 
management. The committee report direeted NPPD to provide a report, not 
later than 60 days after enactment of the bill, on the results from a 
thorough review of all efforts related to five areas: (1) eoordinating and 
exeeuting plans; (2) implementing performance metrics; (3) sustaining 
systemic communication; (4) executing SSA functions; and (5) providing 
education, training, and outreach. The committee report further stated that 
GAO shall review the results of the NPPD report and related efforts of the 
streamlining proeess no later than 60 days after receiving the report to 
determine the extent to whieh NPPD’s efforts were designed to ensure 
mission elarity, useful and aetionable work products, efficacy of planning 
and information sharing, and that cost savings were achieved where 
possible. 

As these initiatives are under way or planned, we could not assess the 
extent to whieh they will identify efforts to streamline the proeesses for 
eoordination and information sharing with industry partners. 

Figure 6 describes the requests of GAO for establishing streamlined practices 
being completed by DHS. 


Government Accountability Office, Critical Infrastructure: Assessment of the Department of 
Homeland Security’s Results of Its Critical Infrastructure Partnership Streamlining Efforts (GAO-14- 
lOOR) (Washington, DC: U.S. Government Accountability Office, 2013), http://www.gao.gov/assets/660/ 
659074.pdf 
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Figure 6. DHS’s Response to the Mandate in Each of the Five Areas 
Outlined in the Senate Committee Report 


Response provided 


Area noted in Senate 
committee report 

Summary of response 

with respect to 
streamlining 

Coordinating and 
Executing Plans 

According to DHS's response. NPPD's Office of 

Infrastnicture Protection (NPPD/IP) coordinates and 
executes plans with various stakeholders (e.g.. Cl owners 
and operators). DHS slated that the Critical Infrastructure 

Risk Management Enhancement Initiative (CIRMEI) seeks to 
ensure that activities conducted to meet the requirements of 
the NIPP are developed and executed considering 
foreseeable risks to critical infrastmcture. DHS further 
reported that, as part of CIRMEI, DHS intends to develop 
short-term and long-term steps that NIPP partners can take 
to address certain risks and opportunities related to Cl that 
are to enhance the coordination and execution of risk- 
management plans. 

No 

Implementing 

PerTormance Metrics 

DHS's response stated that, as part of CIRMEI, outcome- 
based metrics were developed and implemented to better 
assess the cunent state of critical infrastmcture protection 
and resilience. DHS highlighted a number of these metrics 
and related outcomes, and noted that there is much work to 
be done in defining a set of metrics against which all partners 
and NPPD/IP can measure progress in critical infrastmcture 
protection and resilience. 

No 

Sustaining Systemic 
Communication 

DHS reported that partnership, programmatic, and 
information sharing mechanisms are in place to provide 
systemic communication with and among Cl stakeholders. To 
demonstrate that these mechanisms are In place, DHS 
noted, for example, the number of public and private 
members in the NIPP Sector Partnership and the number of 
fusion centers that joined the Critical Infrastmcture 

Information Sharing Environment. 

No 

Executing Sector- 
Specific Agency 

Functions 

According to DHS's response, SSAs function through five 
primary program areas: effective planning and activity 
integration, education and training, information sharing and 
communication, exercises, and assessment and mitigation. 
DHS highlighted performance metrics that NPPD uses to 
evaluate SSA functions. For example, NPPD maintains a 
metric to assess whether stakeholders have an 
understanding of critical Infrastmcture risks and 
interdependencies. According to DHS, NPPD analyses found 
that stakeholders understand that critical infrastmcture risks 
and interdependencies exist, but further assessment is 
needed to understand the extent of the stakeholders' 
understanding. 

No 

Area noted in Senate 
committee report 

Summary of response 

Response provided 
with respect to 
streamlining 

Providing Education. 
Training and Outreach 

DHS stated that NPPD/IP offers a variety of education and 
training resources to Cl stakeholders. For example, DHS 
reported that in 2011, the critical Infrastmcture Infomiation 
sharing environment hosted 28 educational events and 
reached approximatefy 17,500 stakeholders. DHS also stated 
that NPPD/IP conducts outreach to share infomnation and 
intelligence, develop partnerships, and conduct vulnerability 
and security assessments, among other things. DHS's 
response also noted that the successful implementation of 
the NIPP partnership Iramework, for example, demonstrates 
the value of NPPD/IP outreach efforts. 

No 

Some: GAO analysis of OHS nformaton. 


From Government Accountability Office, Critical Infrastructure: Assessment of the 
Department of Flomeland Security’s Results of Its Critical Infrastructure Partnership 
Streamlining Efforts (GAO-14-100R), (Washington, DC: U.S. Government 
Accountability Office, 2013), http://www.gao.gov/assets/660/659074.pdf 
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The failure to answer these Congressional and GAO inquiries follows a long line 
of similar shortfalls in providing evidenee of program effeetiveness and an overall laek of 
transpareney by DHS. In response to GAO, the DHS Critical Infrastructure Protection 
Cost-Benefit Reporf^ is ineonsistent regarding if eost-benefit analysis of Cl proteetion 
has been undertaken. The GAO assessment did not have the seope to assess if measures 
to proteet infrastrueture were effeetive, or eost-effeetive, and DHS offieials stated that by 
the time of the report, the information was outdated due to program maturation. 

Aeeording to Senator Cobum’s 2011 report on the effeetiveness of DHS’s Cl 
proteetion efforts, 

the Appropriations Committees of the Congress instmeted DHS to review 
its efforts to streamline proeesses for eoordinating and sharing information 
with private seetor partners, ineluding owners and operators of eritieal 
infrastmeture, and to report on these efforts to Congress within 60 days. 

Two years later, the Appropriations Committees’ request was answered 
with a report from DHS. GAO reviewed the report and found it did not 
diseuss NPPD’s effort to streamline the proeess for eoordination and 
information sharing with industry partners, raising questions about 
whether the Department of Homeland Seeurity was responding to 
Congress and making progress in this respeet to beeome a more effieient 
partner with the private seetor.93 

D. CHANGES TO NATIONAL CRITICAL INFRASTRUCTURE 
PRIORITIZATION PROGRAM 

In 2013, GAO reported that the DHS Offiee of Infrastmeture Proteetion shifted 
the priorities of the National Critieal Infrastmeture Proteetion Program (NCIPP) to foeus 
efforts on three primary goals of identifying infrastmeture that eould signifieantly impaet 
the nation, inerease aeeuraey in prioritization, and improve planning and eoordination 
with publie and private stakeholders.^4 The updated list of faeilities on the NCIPP would 


Government Accountability Office, The Department of Homeland Security’s Critical Infrastructure 
Protection Cost-Benefit Report (GAO-09-654R) (Washington, DC: U.S. Government Accountability 
Office, 2009), http://www.gao.gov/new.items/d09654r.pdf 

^3 Tom Cobum, A Review of the Department of Homeland Security’s Missions and Performance 
(Washington, DC: United States Senate, 2015), 29, http://www.hsgac.senate.gov/download/?id= 

B92B8382 

94 Government Accountability Office, Critical Infrastructure Protection—DHS List of Priority Assets 
Needs to be Validated and Reported to Congress (GAO-13-296) (Washington, DC: U.S. Government 
Accountability Office, 2013), 9, http://www.gao.gov/assets/660/653300.pdf 
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be used to alloeate grant funding, prioritize protection programs, and inform incident 
planning and response efforts around the facilities'^ Unfortunately, according to GAO, 
the changes to the composition of the prioritization list were not validated, and DHS did 
not establish a process for identifying the impacts of the changes. 

The consequence-based criteria for determining the prioritization of a facility is 
based on immediate loss of life, economic consequences directly or indirectly occurring 
from the loss, or how the infrastructure impacts mass evacuations from urban areas (see 
Figure 7). 


Figure 7. NCIPP Consequence-Based Criteria and Relative Threshold Levels 


1 NCIPP criteria 

Thresholds* I 

Prompt fatalities 



Number of fatalities that occur immediately 
following an event as a direct result of the 
scenano; does not include injunes. illnesses, or 


Level 2 

Level 1 


Economic consequences 

First-year direct and indirect costs following an 

incident. Costs may include evacuation and 

response efforts, asset replacement, downstream 

costs resulting from disruption of product or 

service, and long-term costs resulting from | 

environmental damage but may not include 

monetary value for fatalities Level 2 

Level 1 


Mass evacuation length 

Evacuation of a substantial portion of an urban 

area for an extended penod of time as a result of 

the loss of infrastructure, not the nature of an 

event. Evacuation is related to permanent 1 

residents only and does not include transient 

populations such as commuters or tourists Level 2 

Level 1 



National security 


Severe degradation of the country's national 
security capabilities 

No level-specific thresholds 


From Government Accountability Office, Critical Infrastructure Protection—DHS List of 
Priority Assets Needs to be Validated and Reported to Congress (GAO-13-296) 
(Washington, DC: U.S. Government Accountability Office, 2013), 14, http://www.gao. 
gov/assets/660/653300.pdf 


Government Accountability Office, Critical Infrastructure Protection—DHS List of Priority Assets 
Needs to be Validated and Reported to Congress, 11. 

96 Ibid., 12. 
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Just as the NADB focused on individual facilities instead of points of failure 
within the interconnected infrastructure system, the thresholds for prioritizing 
infrastructure in the NCIPP are also based around individual facilities loses with a focus 
on mass gatherings of people. The number of fatalities occurring immediately following 
an event suggests that something is happening at a facility that holds a large number of 
people. The future human losses from the destruction of a larger infrastructure system 
providing essential services are discounted from the prioritization criteria, which show 
the emphasis on single facilities. The measures of economic impact and evacuation time 
also align more closely with large facilities like stadiums and arenas instead of 
infrastructure systems, such as power grid components. It is unlikely that a power 
substation would have mass fatalities at the site, cause direct economic loses, or have an 
impact on evacuations but all those factors would be relevant if 80,000 people were in 
attendance at a football stadium. 

While the NADB was a list of only individual facilities, the NCIPP differentiates 
between individual facilities (assets) and clusters or systems (groups of facilities). The 
2013 DHS National Infrastructure Plan Supplemental Tool defines critical nodes as the 
point “where potential consequences would be highest”^^ but based on the GAO analysis 
(Figure 8), nodes are only included within the NCIPP list as groups of nodes. The factors 
that differentiate between single facilities that are assets and single facilities that are 
nodes are unclear. 


Department of Homeland Security, Supplemental Tool: Executing a Critical Infrastructure Risk 
Management Approach (Washington, DC: Department of Homeland Security, 2013), http://www.dhs. 
gov/sites/default/fdes/pubhcations/NIPP%202013%20Supplement_Executing%20a%20CI%20Risk%20M 
gmt%20Approach_508.pdf 


38 



Figure 8. Description and Illustration of an Asset, a Node, a Cluster, 

and a System 


Asset 



Node 

( - \ 



Cluster System 




An asset is a single facility 
with a fixed location that 
functions as a single entity. 

Assets are nominated to 
the NCIPP list for meeting 
the criteria by themselves. 


A node is a single facility, 
similar to an asset, but 
does not meet the NCIPP 
list criteria by itself. 

Nodes are not nominated 
for individual consideration 
for inclusion on the list. 


A cluster is a group of two or more 
associated infrastructure facilities 
(assets or nodes) that can be 
disrupted through a single natural or 
man-made event, resulting in regional 
or national consequences. 

Clusters are nominated for inclusion 
on the NCIPP list. 


A system is a group of two or more 
interconnected infrastructure facilities 
(assets or nodes) that can be 
disrupted through a single natural or 
man-made event, resulting in regional 
or national consequences 

Systems are nominated for inclusion 
on the NCIPP list. 


From Government Accountability Office, Critical Infrastructure Protection—DHS List of 
Priority Assets Needs to be Validated and Reported to Congress (GAO-13-296) 
(Washington, DC: U.S. Government Accountability Office, 2013), 18, http://www.gao. 
gov/assets/660/653300.pdf 


GAO found that shifting the prioritization and designation of infrastrueture “eould 
hinder the ability to compare infrastructure across sectors and is not a validated process to 
ensure that it accurately reflects the nation’s highest-priority infrastructure.Using 
measures associated with large groups of people to evaluate the thresholds for importance 
of functional systems may not be an effective strategy. GAO reported, “DHS could not 
provide documentation explaining how the threshold levels were established and the 
NCIPP list had not been verified or validated by an external peer review. 

Regardless of if DHS is maintaining a national database of facilities or a national 
prioritization list, the criteria, and process for determining which infrastructure facilities 
or systems are nationally significant, has been an ineffective effort. 


Government Accountability Office, Critical Infrastructure Protection—DHS List of Priority Assets 
Needs to be Validated and Reported to Congress, 24. 

99 Ibid., 25. 
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E. EXAMPLE OF THE PROBLEM: CRITICAL INFRASTRUCTURE 

CHEMICAL SECTOR 

One example of the IP problem is the DHS Cl ehemieal seetor where DHS has 
dedieated 242-fulltime positions and approximately $90 million to proteeting 3,495 
eritical chemical sector facilities. Further complicating this issue, DHS has identified 
40,000 total chemical facilities as critical but only 3,495 facilities have been categorized 
into tiers (measures of importance)and have completed approved facility security 
plans. A significant amount of manpower and funding has been committed by DHS for 
assessing and protecting chemical facilities. Even with a $90 million budget, only 10% of 
the facilities deemed to be critical have been assessed, which likely means the scope of 
the chemical sector protection mission is too broad. See Figure 9. 


Figure 9. Number and Percentage of Facilities Assigned a Final Tier as of 

January 2013 



Number 

Percent 

Tier 1 

117 

3.4 

Tier 2 

406 

11.6 

Tier 3 

1,040 


Tier 4 

1,932 

55.3 

Total 

3,495 

100.0 


Source GAO analysis of Infrastructure Security Compliance Division data 


From Government Accountability Office, Critical Infrastructure Protection—DFIS Efforts 
to Assess Chemical Security Risk and Gather Feedback on Facility Outreach Can Be 
Strengthened (GAO-13-353) (Washington, DC: U.S. Government Accountability Office, 
2013), 9, http://www.gao.gov/products/GAO-13-353. 


This expansive designation of “critical” for the chemical sector facilities comes 
primarily from the vulnerability of the facilities to theft of dangerous chemical materials 
and sabotage of the facility causing a chemical release. The tiered assessments are not 
based on how the chemicals produced by the facility provide essential services to other 
infrastructure sectors (e.g., chlorine production essential for water treatment in the 


Government Accountability Office, Critical Infrastructure Protection—DHS Efforts to Assess 
Chemical Security Risk and Gather Feedback on Facility Outreach Can Be Strengthened (GAO-13-353) 
(Washington, DC: U.S. Government Accountability Office, 2013), 29, http://www.gao.gov/products/GAO- 
13-353. 

101 Ibid. 
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surrounding area). The assessment approaeh used to measure risk to chemieal facilities is 
based instead on the level of interest a terrorist would have in attacking or infiltrating the 
facility to obtain chemical materials to utilize in an attack elsewhere. The protective 
services provided by DHS assisted facilities with developing facility security plans, 
which focused on a single facility and not how the sector delivers critical functions to the 
public or other infrastructure sectors. 1*^2 jn 2007, DHS established the chemical facilities 
anti-terrorism standards as a requirement of the Department of Homeland Security 
Appropriations Act of 2007 to address the highest risk chemical facilities in the 
country. 103 While IP should be based around assessing chemical facilities support for the 
overall infrastructure functions essential to the nation, the assessment and protection of 
these facilities is measured by risk of theft and infiltration. See Figure 10 for a list of 
seven standards. 


102 Government Accountability Office, Critical Infrastructure Protection—DHS Efforts to Assess 
Chemical Security Risk and Gather Feedback on Facility Outreach Can Be Strengthened, 7. 

103 Office of the Inspector General, Effectiveness of the Infrastructure Security Compliance Division’s 
Management Practices to Implement the Chemical Facility Anti-Terrorism Standards Program 
(Washington, DC: Department of Homeland Security, 2013), 85, https://www.oig.dhs.gov/assets/Mgmt/ 
2013/OIG_13-55_Marl3.pdf 
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Figure 10. DHS Chemical Facilities Anti-Terrorism Standards Risk-based 

Performance Standards 



Risk-Based Performance 
Standards 

Descriptions 

1 

Restrict Area Perimeter 

Secure and monitor the perimeter of the facility. 

2 

Secure Site Assets 

Secure and monitor restricted areas or 
potentially critical targets within the facility. 

3 

Screen and Control Access 

Control access to the facility and to restricted 
areas within the facility by screening and/or 
inspecting individuals and vehicles as they enter. 

4 

Deter, Detect, and Delay 

Deter, detect, and delay an attack, creating 
sufficient time between detection of an attack 
and the point at which the attack becomes 
successful. 

T" 

Shipping, Receipt, and 
Storage 

Secure and monitor the shipping, receipt, and 
storage of hazardous materials for the facility. 

T" 

Theft and Diversion 

Deter theft or diversion of potentially dangerous 
chemicals. 

7 

Sabotage 

Deter insider sabotage. 


From Office of the Inspector General, Effectiveness of the Infrastructure Security 
Compliance Division’s Management Practices to Implement the Chemical Facility Anti- 
Terrorism Standards Program (Washington, DC: Department of Homeland Security, 
2013), 14, https://www.oig.dhs.gOv/assets/Mgmt/2013/OIG_13-55_Marl3.pdf 


Each of these seven performance standards shown in Figure 10 (there are 18 total) 
for chemical facilities are related to physical security of the facility against attack, 
unauthorized access, sabotage, or theft of materials. None of the 18 standards relate to the 
functionality of the facility or the interdependencies with other facilities. Also, no 
standard relating to information sharing or coordination with other infrastructure facilities 
exists. The Chemical Facilities Anti-Terrorism Standards (CFATS) program within the 
DHS National Protection and Preparedness Director was allocated a $93 million budget 
in 2012 for personnel costs, training, systems, and program support.1^4 Even with a list of 
security criteria that only relate to the physical security of individual facilities, the DHS 
Office of the Inspector General found that “more than five years since the program was 


104 Qff[Qg of the Inspector General, Effectiveness of the Infrastructure Security Compliance Division’s 
Management Practices to Implement the Chemical Facility Anti-Terrorism Standards Program, 11. 
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created, almost $443 million had been appropriated, and no faeility has gone through the 
entire CFATS regulatory proeess.’’^*’^ 

Faeilities within the DHS Cl ehemieal subseetor serve as an example of faeilities 
that have been designated as “eritieal” yet proteetive measures funded by DHS only 
pertain to physieal seeurity at individual faeilities. Even with the very limited seope of 
proteetive measures that do not address infrastrueture as an intereonneeted and 
interdependent system, DHS’s internal report found that no faeility was even eompleting 
the entire CFATS evaluation proeess. None of these proteetive measures link baek to the 
overarehing eoneept of Cl being faeilities so essential that their destruetion would eause 
easeading impaets aeross the entire nation. 

F. POTENTIAL SOLUTION—REFINE CRITICAL INFRASTRUCTURE 

DESIGNATION CRITERIA 

DHS is required to manage risks to Cl by NIPP, PPD-21, and the Homeland 
Seeurity Aet of 2002 but “DHS is not positioned to manage an integrated and eoordinated 
government-wide approaeh for Cl vulnerability assessment aetivities as ealled for by the 
NIPP.”!*’^ A remedy for this problem is redueing the overall number of faeilities aeross 
the 16 Cl seetors. Numerous ageneies and DHS eomponents eonduet infrastrueture risk 
assessments and have IP missions that overlap beeause too many different faeilities are 
eategorized as eritieal. Removing the low-risk and non-eritieal faeilities ean simplify 
interageney eoordination by redueing the total number of loeations, tasks, and national- 
level assessments. The eorreetive aetions reeommended by GAO inelude refining 
vulnerability assessment tools, eonsistently eolleeting information, avoiding duplieation, 
and faeilitating information sharing. 1^7 Eaeh of these goals would be easier to aeeomplish 
with a smaller number of Cl faeilities to assess. 


105 QffjQg of the Inspector General, Effectiveness of the Infrastructure Security Compliance Division’s 
Management Practices to Implement the Chemical Facility Anti-Terrorism Standards Program, 13. 

106 Government Accountability Office, Critical Infrastructure Protection DHS Action Needed to 
Enhance Integration and Coordination of Vulnerability Assessment Efforts, 37. 

107 Ibid., 43. 
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IV. WHAT IS THE SOURCE OE THE PROBLEM WITH 
CRITICAL INFRASTRUCTURE PROTECTION POLICY? 


We must not start our thinking on war with the tools of war-with the 
airplanes, tanks, ships, and those who crew them. These tools are 
important and have their place, but they cannot be our starting point, nor 
can we allow ourselves to see them as the essence of war. Fighting is not 
the essence of war, nor even a desirable part of it. The real essence is 
doing what is necessary to make the enemy accept our objectives as his 
objectives. 


— Colonel John A. Warden, The Enemy as a Systemio^ 


A. MILITARY THEORY AND TARGET SELECTION 

The primary component of the DHS Cl protection mission is protecting facilities 
from terrorist attacks stemming from the PPD-21 requirement to “reduce the risks to 
critical infrastructure by physical means or defense cyber measures to intrusions, attacks, 
or the effects of natural or man-made disasters.” 1^9 To create a plan for the protection of 
critical facilities, the intentions of the enemy need to be understood. It is unlikely that a 
terrorist group operating in the United States has the capability to destroy a nationally 
significant infrastructure target that provides life-sustaining services at the national level 
(a RAND terrorism risk modeling report found negligible terrorism risk outside top eight 
Urban Areas Security Initiative (UASI) cities and 10-ton explosive as the least likely type 
of bombing attackHO). These nationally significant facilities would be attractive targets 
for an enemy nation-state with ballistic missile and airpower capabilities but the DHS IP 
measure are also not designed around defense from military air attacks. The current 
terrorist threat comes from homegrown violent extremist and supporters of violent 

John A. Warden, “The Enemy As a System,” AirPower Journal, Spring 1995, http://www.airp 
ower.maxwell.af.mil/airehronieles/apj/apj95/spr95_files/warden.htm. 

109 “\yiiat is Seeurity and Resilienee?” August 24, 2015, http://www.dhs.gov/what-seeurity-and- 
resilienee. 

Henry Willis, Terrorism Risk Modeling for Intelligence Analysis and Infrastructure Protection 
(Santa Moniea, CA: RAND Corporation, 2006), http://www.rand.org/eontent/dam/rand/pubs/teehnieal_ 
reports/2007/RAND_TR3 86.pdf 
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extremist groups who are motivated to infliet mass easualties by killing and injuring as 
many people as possible in a loeation aeeessible to the publie.m These individuals or 
small groups of individuals laek the intelligenee, organizational eoordination, manpower, 
and resourees to eonduet a strategie war eampaign against nationally signifieant 
infrastrueture targets. 

The eurrent Cl proteetion mission is eonvoluted beeause proteetion efforts are 
based around two eompeting strategies, whieh are terror groups interested in inflieting 
mass easualty versus organized militaries (or well-equipped paramilitary organizations) 
eondueting strategie operations with the intent to eripple the nation’s most signifieant 
infrastrueture systems. Current polieies group these two different types of adversarial 
aetion into a single proteetion mission when they are distinetly different. 

B. METHODS OF ATTACK 

Different military strategies have been taught and utilized by the United States 
and other modern militaries. These types of attaeks are based around differing strategie 
objeetives, the ability to gather intelligenee, military eapabilities, and available resourees. 

1. Figures and Tables 

The Air Corps Taetieal Sehool theoryii^ states targeted strikes to speeifie 
faeilities or funetions ean result in eeonomie destruetion would lead to soeial eollapse and 
defeat of the enemy. Lt Col Peter Faber, an expert in strategie aerial warfare, theorizes 
targeted strikes provide the means to win a war in the following manner: 

1. Modern nations rely on industrial and eeonomie systems for produetion 
of weapons and supplies for their armed forees, for manufaeture of 
produets, and provision of serviees to sustain life. Disruption or paralysis 
of these systems undermines both the enemy’s capability and will to fight. 


^ ^ ^ “Countering Violent Extremism,” July 20, 2015, http://www.dhs.gov/topic/countering-violent- 
extremism. 

112 Howard D. Belote, “Warden and the Air Corps Tactical School-What Goes Around Comes 
Around,” AirPower Journal, Fall 1999, http://www.airpower.maxwell.af.mil/airchronicles/apj/apj99/ 
fal99/belote.html. 
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2. Industrial and economic systems contain critical points whose 
destruction will break down these systems if bombs can be delivered with 
adequate accuracy to do this. 

3. Air strike forces can penetrate air defenses without unacceptable losses 
and destroy selected targets. 

4. Proper selection of vital targets in the industrial/economic/social 
structure of an industrialized nation, and their subsequent destruction by 
air attack, can lead to fatal weakening of an industrialized enemy nation 
and to victory through air power. 

Winning a war by employing targeted strikes requires knowledge of the enemy’s key 
systems, intelligence to select the critical points, forces capable of making the attack, and 
forces that can avoid unacceptable losses. 

2. Series Warfare 

Unlike targeted strikes that are carried out with aircrafts, in series warfare, “a 
commander concentrates forces in order to prevail against a single vulnerable part of the 
enemy’s forces. If the commander prevails, the army regroups forces and moves on to 
attack another point in the enemy’s defense. While the attacking army regroups, the 
enemy army may counter attack or move to defend another position.”ii5 This back and 
worth process is termed “serial warfare” because of the “subsequent maneuver and 
counter-maneuver, attack and counterattack, and movement and pause.Series warfare 
continues until either army does not have the capabilities or will to continue fighting. 

3. Parallel Attack 

A combination of targeted attacks and series warfare is the concept of parallel 
attacks against a wide array of essential systems. The most important element of the 
parallel attack is understanding the targets that hold the highest value to the enemy 
system. Once the system is understood, a strategy must be developed to damage or 

113 Peter Faber, “Competing Theories of Airpower: A Language for Analysis,” AirPower Journal, 
April 30, 1996, http://www.airpower.maxwell.afmil/%20airchronicles/presentation/faber.html. 

114 Ibid. 

113 Ibid. 

116 Warden, “The Enemy As a System.” 
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paralyze it. A nation is likely to have a “small number of vital targets at the strategie level 
beeause most systems only cause localized disruptions if damaged.”!!^ The nationally 
significant targets “tend to be small, very expensive, have few backups, and are hard to 
repair”! that aligns with the same concept of Cl, which is interdependent systems that 
cause system-wide failures. 


Figure 11. Process of Actions during Strategic Warfare 


Collect Intelligence/Determine Significant Targets 
Attack Significant Targets 


Loss of Critical Facilities Causes Cascading Impacts to 
_other Critical Facilities/Services_ 



Deaths/Injuries/Illness Due to Lack of Critical 
Services 


Defeat or Surrender 


If a significant percentage of key targets are struck in parallel, the damage 
becomes insurmountable. The enemy can mitigate the effects of serial attacks by 
“dispersing the location of critical targets, by increasing the defenses of targets that are 
likely to be attacked, concentrating resources to repair damage to single targets, or 
conducting a counter offensive.”! The purpose of the parallel attack is to deprive the 
enemy of the ability to respond effectively to mitigate the impacts of the attack. The 
higher the number of significant targets destroyed during each set of strikes, the higher 
the likelihood of debilitating the enemy. !20 The current DHS strategy of protecting Cl by 

!!^ Warden, “The Enemy As a System.” 

!!8lbid. 

!!9lbid. 

!20 Ibid. 
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adding redundancies and hardening targets directly relates to the concept of identifying 
and protecting key targets from the parallel attack. 

4. Mass Casualty Attack 

Online publications, such as The Islamic State’s Dabiq and A1 Qaeda’s Inspire, 
have provided instructions for supporters to carry out homemade conventional explosive 
and small arms attacks. The intent of these attacks is to inflict as many deaths and injuries 
as possible by targeting crowded public areas and special events. An example of this 
tactic was the April 15, 2013 Boston Marathon bombing attack where two radicalized 
individuals produced small homemade explosives that were detonated at the crowded 
finish line area of the city’s annual marathon. 

Figure 12. Process of Actions Occurring during 
Conventional Terrorist Attacks 


Explosh/eAttack 

Deaths/Injuries 

Secondary Attack 

Additional Deaths/Injuries 


The likely purpose of these attacks on the American public was to kill and injure 
people to cause fear rather than being a focused strike on an infrastructure component 
that would result in cascading impacts to the systems that underpin the functions of the 
United States. 

5. Mutually Assured Destruction 

The underlying theory of nuclear war between multiple industrial nations with 
nuclear weapons is that if a nuclear weapon were detonated, mutually assured destruction 
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would occur to all nations involved due to counter nuelear attacks. In the end, nobody 
would win the nuclear war beeause the causalities and damage on every side would be 
eatastrophic. 

The mutually assured destruction (MAD) concept is applieable to planning for Cl 
proteetion based on the size of an attaek that would be required to damage a critical 
system. The massive amount (a theoretical 10,000 pounds or more of explosives 
exeeeding the size of the Oklahoma City federal building attack) that would be needed to 
destroy a large dam or multiple simultaneous attacks on electrical power plants would be 
of scope large enough to assure the destruction of the nation-state, paramilitary army, or 
terrorist group responsible. Is it realistic to plan for, or protect against attacks, of this 
scope at infrastructure facilities when it is unlikely that terrorist groups eould utilize sueh 
a large quantity of explosives? Inereasing physical security at a facility with taller fences 
and stricter identifieation ehecks designed to stop a small-scale and unlikely terrorist 
attaek would do nothing to protect against a ballistic missile strike, whieh is the most 
realistie, but very unlikely, threat to the facility. 

C. WARDEN’S FIVE-RING SYSTEM THEORY 

Countries are inverted pyramids that rest preeariously on their strategie 
innards—their leadership, communieations, key production, infrastructure, 
and population. If a country is paralyzed strategically, it is defeated and 
cannot sustain its fielded forees though they may be fully intact. 

— Colonel John Warden, Air Theory for the Twenty-First Centuryi^i 

Warden’s five-ring system theory is a eoncentric ring eoneept of targeting the 
central rings that hold the highest strategie value (see Figure 13; the eentral ring is also 
the smallest target). In the rings beyond the highest value targets, the targets become 
larger and have less strategic significance. Warden seleeted five general systems that he 


121 Anthony B. Carr, “America’s Conditional Advantage: Airpower, Countering Urgency, and the 
Theory of John Warden,” Homeland Security Digital Library, June 1, 2009, https://www.hsdl.org/?view& 
did=697900. 
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believed were key centers of gravity to exploit against any enemy (leadership, organic 
essentials, 122 infrastructure, population, and fielded military forces). 


Figure 13. Warden’s Five-Ring System Theory 



Leadership 

System Essentials 
Critical 

Infrastructure 

Population 

Field Forces 


From Clayton Chun, “John Warden’s Five Ring Model and the Indirect Approach to 
War,” ETH Zurich, June 1, 2008, http://www.isn.ethz.ch/Digital-Library/Pubhcations/ 
DetaiF?ots591=0c54e3b3-le9c-bele-2c24-a6a8c7060233&lng=en&id=57408. 


Warden’s model provides a framework for how to defeat an enemy through 
destruction of critical components instead of engaging in combat with a conventional 
army. 123 This strategy is only effective if the attacker has the ability to identify and 
strategically plan how to destroy each of those systems in a specific order.i24 Warden’s 
theory aligns with DHS’s tiered approach to IP and the NADB. If military theorists 
trained in Warden’s approach looked at how to identify and protect domestic 
infrastructure, they would likely think of it through a concentric ring-based system. 

The flaw in applying Warden’s theory to domestic IP is that the strategic values of 
the targets within each ring are not static. Leadership can be adaptive and resilient, the 


122 Defined as “the facilities or processes without which the state or organization cannot maintain 
itself It is not necessarily directly related to combat.” Warden, “The Enemy As a System.” 

123 Chun, “John Warden’s Five Ring Model and the Indirect Approach to War.” 

124 Ibid., 301. 
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relationships between systems ean be too eomplex to understand eompletely, and most 
adversaries lack the resources necessary to conduct parallel attacks across a vast array of 
domestic targets.125 These same problems are also evident in current Cl protection 
policies because as facilities are hardened, demand for services changes, populations 
shift, different technologies are developed, and the criticality of infrastructure facilities 
also changes. Compounding the problem, the concentric ring system is ineffective if the 
wrong facilities are identified as being the key targets. Placing non-essential system into 
the central rings creates a large core rather than concentric rings that delineate the 
importance of different assets. 

Warden’s theory depends on taking a snapshot of the enemy system and carefully 
analyzing it to understand the weaknesses in the system. This same strategy is not an 
effective manner of analysis of vulnerabilities to domestic infrastructure over an extended 
period of time. Conducting assessments of infrastructure and creating tiered lists of 
resources would provide strategic planners with the critical systems at that point in time 
but as the value of targets changes, the target list would become less and less useful. The 
effectiveness of the target list would also be contingent on the how completely it captured 
the entirety of the system. Identifying individual facilities would only be useful if their 
destruction caused the cascading impacts that could cripple the essential functions of the 
enemy. The process of identifying these interdependencies would require an analysis of 
the entire system to determine the points of failure and then tracing the failures back to 
identify individual facilities as key targets. The current DHS policy identifies sectors of 
infrastructure and then identifies individual facilities within the separate sectors. This 
approach lacks the key “enemy as a system” concept of understanding the 
interdependencies and identifying the specific points of failure in the system. These 
points of failure are not broad sets of infrastructure systems; they are small areas of high 
strategic value in the center of the concentric rings. 


125 Ibid., 306. 
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D. TERRORISM DIFFERS FROM STRATEGIC WARFARE 


The September 11, 2001 attacks on New York City and the Pentagon, the March 
11, 2004 train bombings in Madrid, the July 7, 2005 London transit bombings, and the 
2010 attempted Atlantic airline bombings with ink cartridges concealing explosives are 
all examples of how the most sophisticated terrorist attacks in recent history are different 
from strategic warfare. 

These attacks were not targeted strikes against essential systems intended to 
cripple an enemy population. The Madrid^^s and Londoni27 attacks targeted 
transportation systems and occurred along busy transit pathways. However, the attacks 
did not target the key hubs of the system or cause cascading outages through the system. 
The same attacks carried out in more carefully selected locations could have caused 
wider impacts to the transportation system and inflicted a greater number of causalities. A 
strategic targeted strike intended to cripple transportation system would have occurred in 
a different manner. 

The four major terrorist attacks also did not follow the concepts of series warfare 
in which an attack is mounted, resources are regrouped, and a subsequent attack occurs. 
Following the plane crashes at the WTC and the Pentagon, no plan or operation was in 
place for a second wave of attacks. If the 9/11 attacks were part of a series warfare 
strategy, a second operation would have already been underway but was not. 128 xhe same 
was true of the European transit bombings where coordinated attacks occurred but no 
second or third wave of subsequent attacks were prepared. 

While the 9/11 attacks and the transit bombings targeted multiple locations, these 
attacks were not examples of a parallel attack strategy either. A parallel attack 
simultaneously strikes the key facilities in an area causing a crippling effect across the 
entire system. These significant terrorist attacks did not cripple the individual systems 

126 “Madrid Train Attacks: How the Attacks Happened,” http://news.bbc.co.Uk/2/shared/spl/hi/guides/ 
457000/457031/html/default.stm. 

127 “London Bombings Toll Rises to 37,” July 7, 2005, http://news.bbc.co.Uk/2/hi/uk/4661059.stm. 

128 David Stout, “Original Plan for 9/11 Attacks Involved 10 Planes, Panel Says,” The New York 
Times, June 16, 2004, http://www.nytimes.eom/2004/06/16/politics/16CND-REPORT.html. 
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that they targeted (e.g., striking the Pentagon did not shut down the U.S. military) or 
cause cascading impacts that crippled other essential systems. Each attack caused isolated 
impacts to a single component of the infrastructure system. 

The timing and location of the 9/11 and transit attacks also demonstrate that the 
attacks were not intended to cause the maximum number of causalities possible. While 
50,000 people worked in the original WTC towers, the attack occurred before 9:00 AM 
when most people get to work.i29 instead of potentially killing 50,000 people, 2,977 
people died when the plane struck at 8:46 AM.i^o a 1 Qaeda operatives spent years 
planning the 9/11 attack so it seems unlikely that they would have chosen to strike before 
9:00 AM if the intent was to carry out a mass causality attack that would kill as many 
people as possible. 


Figure 14. Warden’s Five-Ring System Theory Applied to DHS Critical 

Infrastructure Sectors 


Warden's Five-Ring System Theory 
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129 “Xhe World Trade Center—Faets and Figures,” aeeessed July 22, 2015, https://www.nysm.nysed. 
gov/ wte/about/faets .html. 

“September 11th Fast Faets,” Mareh 27, 2015, http://www.enn.eom/2013/07/27/us/september-l 1- 
anniversary-fast-faets/. 
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Based on Warden’s coneentrie rings theory, each of the terrorist attacks targeted 
the outermost rings that consist of the population and the field forces. If the terrorist 
attacks were strategic in nature, they would have likely tried to target the inner rings to 
cause more disruption across the entire country. Attacks targeting the inner rings could 
have been the New York Stock Exchange or the White House. 

E. TERRORISTS HISTORICALLY DO NOT TARGET CRITICAL 

INFRASTRUCTURE 

Improvised explosives, vehicle borne explosives, and firearms were the primary 
weapon in more than 99% of terrorist attacks according to the Mineta Transportation 
Institute National Transportation Security Center of Excellence study of multiple 
terrorism attack databases.While these types of attacks have the power to kill people 
and cause damage to property, they do not have the destructive capability to cease the 
functions of most Cl facilities, such as power plants, telecommunications hubs, dams, 
water treatment facilities, regional transportation systems, and so on. Why is protection 
of facilities providing essential infrastructure functions a primary goal of DHS when 
these facilities are rarely targeted, and do not align with the motivation for terrorist 
groups? 

Protecting Cl against terrorist attacks is a primary mission of DHS, but the 
execution of this mission is flawed in many ways. Current policies and procedures look at 
targets in a different way than how a terrorist would select a target for attack. The 
protection of potential targets is designed around methods of attack that are different 
from how the majority of terrorist attacks are carried out. The consequences of an attack 
on a target are assessed based on the number of deaths, injuries, and dollars rather than 
the public exposure or alignment with an ideology that the target represents. Following 
similar ideas as the book. From the Terrorist’s Point of View, rather than refine the 
approach to identify threats, current practice is to cast a larger and larger net, which 
requires greater resources for smaller results. 

131 “Explosives and Incendiaries Used in Terrorist Attacks on Public Surface Transportation: A 
Preliminary Empirical Examination,” March 1, 2010, http://transweb.sjsu.edu/MTIportal/research/ 
publications/documents/2875-IED-Support-Research.pdf. 
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The mission of protecting Cl can be refined through a psychological approach to 
evaluate why a terrorist attacks, a likely method of attack, and the type of target that 
would align with the desired results. Unlike convention warfare, terrorists view their 
tactics as a driver for social change making the highest value targets different from those 
chosen by a conventional army commander. 

F. FEAR—THE CRITICAL STRATEGY OF TERRORISM 

Terrorism experts like Bruce Hoffman argue that large-scale terrorist attacks with 
weapons of mass destruction (which have never occurred) and large events like the 9/11 
attacks on the WTC are counter-productive strategies for terrorist groups. Small-scale 
attacks cause “disproportionately enormous consequences, generate fear and alarm, and 
thus serve the terrorists’ purposes just as well as a larger weapon or more ambitious 
attack.”i32 According to Breckenridge and Zimbardo, “a heightened sense of crisis can 
lead to political disaffection and diminished confidence in the government” 133 and the 
resulting fear and anxiety across the population from the attack aligns better with 
terrorist’s goals of political or social changes than inflicting mass destruction or 
causalities. For example, Osama Bin Laden’s attack on the United Stares prior to 
September 11, 2001 were also attempting to erode public support and cause political 
pressure to remove U.S. forces from the Middle East. These attacks were intended to 
erode the general public’s support of U.S. leaders, not to kill the entire American 
population. “It is not surprising that fear and apprehension can have considerable political 
consequences. Affective influences on attention, memory, and judgment contribute to the 
widespread experience of disproportionate vulnerability and looming threat appraisal that 
make terrorism a more psychologically complex phenomenon.”134 


132 Bruce Hoffman, Inside Terrorism (New York: Columbia University Press, 2006), 8. 

133 Bruce Michael Bongar, Psychology of Terrorism (Oxford: Oxford University Press, 2007), 117. 

134 Ibid., 118. 
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G. 


OSAMA BIN LADEN’S STRATEGY—OCCUPIED COUNTRY 
STRATEGY 


While the conventional army wants to conquer territory at the lowest cost, Osama 
Bin Laden’s strategy was the opposite. Instead of wanting to invade America and take 
over resources, his plan was to draw the United States into a prolonged and unwinnable 
military conflict in the Middle East that would eventually bankrupt this country. In 2004, 
Bin Laden delivered the message that 

all that we have to do is to send two Mujahedin to the farthest point East to 
raise a piece of cloth on which is written al-Qa’ida in order to make the 
generals race there to cause America to suffer human economic and 
political losses without their achieving for it anything of note other than 
some benefits to their private companies. This is in addition to our having 
experience in using guerrilla warfare and the war of attrition to fight 
tyrannical superpowers as we alongside the Mujahedin bled Russia for 10 
years until it went bankrupt and was forced to withdraw in defeat. So we 
are continuing this policy in bleeding America to the point of 

bankruptcy. 135 

Bid Eaden’s motivation for waging this style of war was because he viewed his 
territory as being under occupation and the strategy was designed to make the continued 
deployment of U.S. troops unsustainable. In his videotaped messages. Bin Eaden states, 
“we fight you because we are free men who don’t sleep under oppression. We want to 
restore freedom to our Nation and just as you lay waste to our Nation, so shall we lay 
waste to yours.”136 Bin Eaden’s message showed no interest in invading the United 
States or eradicating the entire American public. 

This freedom fighter warfare strategy is problematic for a conventional military 
because of the imbalance between the extreme expense of a maintaining a remotely 
deployed modern military force with the minimal expense of conducting gorilla 
operations with a small number of operatives and homemade explosives. 


135 Osama Bin Laden, “Transcript: Translation of Bin Laden’s Videotaped Message,” The Washington 
Post, November 1, 2004, http://www.washingtonpost.eom/wp-dyn/articles/A16990-2004Novl.html. 

136 Bin Laden, “Transcript: Translation of Bin Laden’s Videotaped Message.” 
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H. HOMELAND SECURITY ENTERPRISE VERSUS HOMEGROWN 

VIOLENT EXTREMISTS 

The same imbalanees in the eosts of waging warfare exist between the thousands 
of entities in the law enforeement arm of the homeland seeurity enterprise and the 
homegrown violent extremists who self-radiealize to jihad against domestic targets. 

In 2010, A1 Qaeda transitioned to a “death by a thousand cuts” strategy, which 
focused on a high volume of low cost attacks. One example is the plot to use bombs in 
printer cartridges to destroy planes. This plot had an estimated cost of $4,200^37 but 
would have done hundreds of millions of dollars in damage to the aviation industry by 
destroying two Bowing 747 aircraft valued at more than $200 million each,i38 and 
causing subsequent groundings of other flights. 139 Similar to the problems with the 
military occupation of Iraq and Afghanistan, the cost of maintaining thousands of 
intelligence analysts and law enforcement officers dedicated to counter-terrorists is 
unsustainably expensive, while the cost of conducting small-scale terrorist operations is a 
reasonable expense for A1 Qaeda. 

Both A1 Qaeda’s Inspire magazine and the Islamic State’s Dabiq offer similar 
guidance to future jihadists to conduct small attack close to home, such as the message in 
Dabiq No. 6 of “the Muslims will continue to defy the kafir war machine, flanking the 
crusaders on their own streets and bringing the war back to their own soil.”i40 

I. TERRORIST’S TARGET SELECTION—MAXIMUM EXPOSURE NOT 

CRITICAL FUNCTIONS 

The use of fear as a tactic makes the target selection for a terrorist attack even 
more complicated to determine. “The potential for misplaced threat-related priorities may 


137 Matthew Cole, “A1 Qaeda Promises U.S. Death by a ‘Thousand Cuts’” ABC News, November 21, 
2010, http://abcnews.go.com/Blotter/al-qaeda-promises-us-death-thousand-cuts/story?id=12204726. 

138 “Boeing 747-400 Freighter Commercial Cargo Jet,” http://planes.axlegeeks.com/F279/Boeing-747- 
400-Freighter. 

139 Saad Abedine, “Yemen-based A1 Qaeda Group Claims Responsibility for Parcel Bomb Plot,” 

CNN, November 5, 2010, http://www.cnn.eom/2010/WORLD/meast/ll/05/yemen.security.concem/. 

140 “ISIS Releases Issue 6 of Dabiq Magazine,” December 30, 2014, http://www.clarionproject.org/ 
news/islamic-state-isis-isil-propaganda-magazine-dabiq#. 
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represent a partieularly daunting ehallenge for the United States, whieh ean antieipate a 
vast array of possible terrorist targets and methods, but relatively to many areas of 
eonfliot, it has had little historieal experienee with terrorist attaoks.”i4i 

Without a framework of past experienee with terrorism, DHS likely used 
eonventional military strategies to identify domestie CL One of these sourees was likely 
Sun Tzu’s war strategy, whieh eentered on defeating the enemy with least amount of 
effort possible. This same strategy has been utilized by the United States in the air 
bombing eampaigns against Iraq. Using Warden’s theory of eonoentrie rings, the highest 
value targets (the leadership and most Cl) are targeted to eripple the remainder of the 
eountry. Preeise attaeks to the strategie eore leave the population mostly unharmed. 

Terrorism is not about eonquering the enemy or using strategie strikes. Sinee the 
objeetives of a terrorist group are different from an army. Cl faeilities have lower value 
and are less likely to be targeted. The intent of the terrorist is to send a message and gain 
maximum exposure but not neeessary eripple the funetions of the target. Of the 125,087 
ineidents in the Global Terrorism Database, more than 74,000 had no injuries and 90% 
had less than 10 injuries from the attaek (Figure 15). Nearly 63,000 also had no fatalities 
and more than 90% of ineidents also had less than 10 fatalities (Figure 15). This small 
number of injuries and deaths oeeurred even though 59,982 of the ineidents were 
bombings/explosions targeting primarily private eitizens, businesses, military, and 
government. As shown in Figure 17, less than .5% of the attaeks were against 
teleeommunieations systems, whieh are a eritieal eomponent of infrastrueture systems 
and would be a high value strategie target. 


Psychology of Terrorism, 118. 
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Figure 15. Fatalities from Terrorist Attaeks 


• Unknown (7140) 

• 0(62928) 

• 1-10(49587) 

• 11 -50(4705) 

• 51 -100(360) 

• 101 (117) 



From “Global Terrorism Database, Seareh Results: 141966 Ineidents,” accessed July 22, 

2015, http://www.start.umd.edu/gtd/. 

The 1995 Aum Shinrikyo attaek on the Tokyo Subway using riein is an example 
of a terrorist attaeked that occurred at a critical transportation facility but the intent of the 
attack was not to cripple the transportation system. The doomsday cult held a belief that 
the Japanese government was corrupt and responsible for a pending apocalypse, so a 
shocking attack would cause the people of Japan to prescribe to the Aum Shinrikyo 
beliefs. Regardless of the reason, this attack was destructive and deadly, but it was not an 
attack on an infrastructure system; it was an attack on a mass gathering of people inside a 
vulnerable area. 1^2 

In Osama Bin Laden’s video tape released taking credit for the 9/11 attack, he 
said, “the Twin Towers were legitimate targets, they were supporting U.S. economic 
power. These events were great by all measurement. What was destroyed were not only 
the towers, but the towers of morale in that country.” Laden’s statement makes it 
clear that the attack was not intended to destroy the American economy or collapse the 

142 Nicholas Kristof, “A Guru’s Journey—A Special Report; The Seer among the Blind: Japanese Sect 
Leader’s Rise,” The New York Times, March 25, 1995, http://www.nytimes.com/1995/03/26/world/guru-s- 
journey-special-report-seer-among-blind-japanese-sect-leader-s-rise.html. 

143 David Bamber, “Bin Laden: Yes, I Did It,” The Telegraph, November 11, 2001, 

http ://www.telegraph.co.ukynews/worldnews/asia/afghanistan/l 362113/B in-Laden-Yes-I-did-it.html. 
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infrastructure of New York City; the purpose of the attack was to scare and damage the 
morale of the American people. Like the Irish Republic Army (IRA), and Aum 
Shinrikyo, the attack was a message, not a targeted strike on Cl systems. 

Another terrorist group focused on the message of the attack rather than the death 
and destruction caused by it was the IRA. It was a standard practice of the IRA to call in 
and report bombings prior to the explosion because the intent of attack was not to harm 
civilians. 144 As demonstrated in Figure 16, in 74,838 of 125,087 attacks (59.8%), no 
injuries occurred. Mass injuries harming more than 100 people occurred less than .08% 
of the time. In the majority of cases, the goal of a terrorist attack has been to send a 
message rather than cause widespread harm. 

Figure 16. Injuries from Terrorist Attacks 

• Unknown (10889) 

• 0(74838) 

• 1 -10(31921) 

• 11 -50(6265) 

• 51 -100(714) 

• 101 (289) 



From “Global Terrorism Database, Seareh Results: 141966 Ineidents,” aeeessed July 22, 
2015, http://www.start.umd.edu/gtd/. 


When considering the facilities at risk for a terrorist attack, the Cl protection 
policies do not align to most frequent targets for terrorist groups around the world. 


144 David Sharroek, “IRA Is Not So Ruthless and Always Gives Bomb Warnings,” The Telegraph, 
September 19, 2001, http://www.telegraph.eo.uk/news/uknews/1340995/IRA-is-not-so-ruthless-and- 
always-gives-bomb-wamings.html. 
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Shown in Figure 17, the most common targets are private citizens, police, military, and 
government (general and diplomatic), accounting for 70% of all attacks. Facilities 
providing purely infrastructure functions, such as telecommunications and utilities, were 
targeted in 4.4% of attacks. 


Figure 17. Terrorist Attack Targets by Type 


9 Abortion Related (255) 

9 Government (Diplomatic) (3166) 
9 Journalists. Media (2332) 

9 Military (17029) 
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• Unknown (1978) 

9 Food or Water Supply (268) 
Government (General) (17208) 
9 Police (17286) 

9 Private Citizens, Pro... (30738) 
9 Terrorists/Norvstate M... (1885) 
9 Violent Political Party (1197) 

9 Business (17299) 

9 Educational Institution (3439) 

9 Maritime (306) 
m other (266) 

9 Religious Figures/lnsL.. (3197) 
Utilities (4986) 

9 Airports and Aircraft (1275) 

9 Telecommunication (886) 

9 Tourists (475) 



From “Global Terrorism Database, Seareh Results: 141966 Ineidents,” aeeessed July 22, 
2015, http://www.start.umd.edu/gtd/. 


J. TERRORIST’S MOTIVATION—ATTENTION AND REWARD 

Terrorists killing innocent people does not seem like rational actions to most 
people in the Western world. Conventional thinking about terrorist tactics and targets 
would suggest that they want to inflict the most damage on as many people as possible. 
For this reason, standard practices for protecting Cl include building fences, installing 
traffic bollards, monitoring security cameras, and screening visitors at locations, such as 
government buildings, commercial offices, stadium, hotels, casinos, sports arenas, 
museums, and so on. 

The motivation for terrorist attacks is also distinctly different from a targeted 

military strike designed to cripple the infrastructure systems of the enemy. The attack is 

not about destroying the function of the physical system; it is about sending a message to 

society. The functions of a “terrorist attack can include: 
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• showing that the authorities are weak and vulnerable to attaeks 

• proving that the authorities are unable to eontrol events 

• lowering allegianees to the authority institutions 

• ereating a sense of instability and lawlessness in soeiety 

• creating a sense of helplessness among the population 

• giving the impression of terrorist organizations as being very powerful 

• giving the impression that there will be no end to terrorist attacks until a 

final victory” 145 

These functions of a terrorist attack are not exclusive to Islamic extremists. The same 
fundamental goals motivated groups like the IRA, Aum Shinrikyo in the Tokyo Subway 
Ricin Attack, and lone-wolf attacks, such as the Oklahoma City Bombing. 

The current Cl protection policies that aim to prevent all types of attacks are in 
many ways similar to the difficulty DHS has with identifying individuals as terrorists. 146 
The focus on protecting Cl has been identifying all possible targets, building better 
barriers, installing more security and surveillance systems, and gathering large amounts 
of real time intelligence. In the same manner that stopping every potential terrorist the 
moment before they strike is unrealistic, it is also impossible to protect every potential 
target from every possible type of attack. Cl protection should focus on determining the 
most likely targets and realistic forms of attack that would align with the goals of the 
terrorists groups. In most cases, the likely targets are not Cl facilities. 

K. DIFFERENCE BETWEEN CRITICAL AND TARGETABLE FACILITIES 

A potential point of confusion in the Cl protection mission is the difference 
between facilities that are part of a Cl system and facilities that are attractive targets for 
terrorism. While a water treatment plant might be a Cl facility, its remote location, 
inaccessibility to the general public, and lack of people at the site, might not make it an 

145 Fathali M. Moghaddam, From the Terrorists’ Point of View What They Experience and Why They 
Come to Destroy (Westport, CT: Praeger Security International, 2006), 85. 

146 Johnson, “Remarks By Secretary Jeh Charles Johnson On “The New Realities of Homeland 
Security” As Part of the Landon Lecture Series on Public Issues—^As Prepared For Delivery.” 
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attractive target for a terrorist. Inversely, an outdoor concert might not serve any 
infrastrueture funetion but due to the large erowds and open aecess to the area, it eould be 
an attractive terrorist target. By looking at the types of facilities attaeked in the Global 
Terrorism Database (Figure 18), a differenee ean bee seen between a “targetable” faeility 
and a “eritieal infrastrueture” facility. 


Figure 18. Explosive Attacks by Target Type in 62,921 Incidents 
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From “Global Terrorism Database, Seareh Results: 141966 Ineidents,” aeeessed July 22, 
2015, http://www.start.umd.edu/gtd/. 


Looking more speeifieally at domestic terrorist attaeks that have eaused 1-10 
fatalities or injuries (Figure 19), the Global Terrorism Database includes 149 incidents 
from 1973 to 2014. The two attaeks targeting utilities inelude the 2012 attempted 
bombing of a gas pipeline by a sovereign eitizen in Plano City, Texas, and the 1976 
utility targeted by the New World Liberation Lront.i^s xhe majority of attaeks target 
government, police, private citizens, edueational institutions, and businesses. 
Infrastrueture systems including airports, transportation, and utilities are seldom the 
target. 



147 “Global Terrorism Database, Seareh Results: 141966 Incidents,” 2015, http://www.start.umd.edu/ 

gtd/. 

148 Ibid. 
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Figure 19. Domestic Attacks Causing 1-10 Fatalities/Injuries 
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# Unknown (3) 
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From “Global Terrorism Database, Seareh Results: 141966 Ineidents,” aeeessed July 22, 
2015, http://www.start.umd.edu/gtd/. 


Since 1970, seven terrorist attacks have occurred in the United States that have 
killed or injured more than 101 people, as shown in Table 2. These incidents include the 
2013 Boston, MA Marathon Bombing, the 9/11 attack at the Pentagon in Arlington, VA, 
the 9/11 attack at the WTC in New York, NY, the 9/11 plane crash in Shanksville, PA, 
the 1996 Olympic bombing in Atlanta, GA, the Oklahoma City federal building bombing 
in 1995, and the 1984 biological (salmonella) attack on The Dalles, Oregon.i^^ target 
of each bombing was selected to send a specific message from the group responsible for 
the attack. In each case, the attack did not cause a significant disruption to Cl or the 
functions of the facility attacked, the surround facilities, or government (local, state, or 
federal). 



149 “Global Terrorism Database, Search Results: 141966 Incidents.” 
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Table 2. Terrorist Attacks Causing More than 101 Deaths or Injuries 

in the United States 


Attack 

Purpose/Intent 

Consequence 

Disruption to Cl 

Success? 

Boston Marathon 
Bombing 

Establishment of 
Islamic Caliphate; 
acceptance in radical 
Islamist 

communities; wage 
war against the 

United States 

Two fatalities, 132 
injuries, marathon 
stopped, minor 
damage to 
surrounding 
buildings 

Localized closures at 
site of explosion (7- 
10 days), city-wide 
closures due to law 

enforcement 
operations while 
searching for suspects 

Partial—Attack 

did not harm 

U.S. military or 

overseas 

military 
operations; 
Tsarvaev 
brothers gained 
acceptance in 
radical 

communities 

9/11 Attack— 
Pentagon 

Remove U.S. 
military forces from 
countries in the 

Middle East by 
striking domestic 

U.S. target with a 
high profile attack 

189 fatalities, 106 
injuries, significant 
damage to a 
portion of the 
Pentagon 

U.S. Military 
command functions 
and U.S. government 
functions had 
minimal disruptions 
to critical operations 

No—other than 
killing/injuring 
people at the 
site of the 
attack, the goals 
were not 
accomplished 

9/11 Attack— 

World Trade 

Center 

Remove U.S. 
military forces from 
countries in the 

Middle East by 
striking domestic 

U.S. target with a 
high profile attack; 
cause widespread 
fear in public and 
erode support for 
government 

2,996 fatalities, 
+6,000 injuries, 
total destruction of 
multiple buildings 

Localized disruptions 
to infrastructure 

functions at the site of 

the attack and 

immediate surround 
areas; regional 
infrastructure 
functions experienced 
minimal disruption 

No—other than 
killing/injuring 
people at the 
site of the 
attack, the goals 
were not 
accomplished 

9/11 Attack— 
Shanksville, PA 

Remove U.S. 
military forces from 
countries in the 

Middle East by 
striking domestic 

U.S. target with a 
high profile attack; 
final target unknown 

40 fatalities (crew 
and passengers of 
AA Flight 77) 

None 

No—plane 
crashed prior to 
reaching 
intended target 


National Public Radio, “The Brothers’ Examines Motivation Behind Boston Marathon Bombing,” 
April 3, 2015, http://www.npr.org/2015/04/03/397213144/-the-brothers-examines-motivation-behind- 
boston-marathon-bombing. 
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Attack 

Purpose/Intent 

Consequence 

Disruption to Cl 

Success? 

Atlanta Olympic 
Games Bombing 

Force cancellation 
of Olympic Games 
to protest the U.S. 
governments 
allowance of 

abortions 

1 fatality, 110 
injuries 

Olympic Games 
continued with 
minimal disruptions; 
no disruptions to 
infrastructure 

functions 

No—other than 
killing/injuring 
people at the 
site of the 
attack, the goals 
were not 
accomplished 

Oklahoma City 
Bombing 
(Murrah Federal 
Building) 

Retaliation against 
the federal 
government for gun 
control and Waco, 

TX Branch Davidian 
standoff (attack 
occurred on 2-year 
anniversary) ^ ^ ^ 

168 fatalities, 650 
injuries, significant 
damage to targeted 
building 

Localized disruptions 
at site of attack; local, 
state, and federal 
government 
continued to function; 
minimal impacts to 
infrastructure 

functions 

No—attack did 
not change 
government 
policies 

The Dalles, 

Oregon 

Salmonella 

Attack 

Sicken the local 
population prior to 
election to allow 
Rajneeshee Group 
candidate to win 

election^^^ 

0 fatalities, 751 
injured, no damage 
to buildings 

No disruption to 
infrastructure or 
government functions 

No 


As these seven attacks demonstrate, targeting and injuring a large number of 
people does not align with attacking a facility that provides essential infrastructure 
functions to the nation or region. In each case, the disruptions to essential infrastructure 
services were nonexistent or minimal in even the immediate areas where the attacks 
occurred. 

Why does Cl protection policy focus on large-scale attacks to Cl facilities when 
they have not been the target of the largest domestic terrorist attacks, and were rarely the 
target of the 130,000 terrorist attacks across the world over the last 50 years? 


History.com, “Oklahoma City Bombing,” A&E Television Networks, accessed July 22, 2015, 
http://www.history.com/topics/oklahoma-city-bombing. 

Public Broadcasting Service, “History of Biowarfare,” 2002, http://www.pbs.org/wgbh/nova/bio 
terror/hist nfhtml#cult. 
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L. TARGETABLE LOCATIONS AND EVENTS 

Terrorists are interested in attacking locations that are accessible, crowded with 
people, have minimal security, and will draw the interest of the general public and the 
media. The six major terrorist attacks on the United States fit these criteria. For example, 
the Olympic Park in Atlanta, Georgia was accessible to the general public and had no 
security screenings. On the local scale, the 10 restaurant salad bars targeted in the 1984 
salmonella attacks were easily accessible to the terrorist group, frequented by the public, 
and the consequences were intended to be widespread across the community. The most 
recent attack at the Boston Marathon targeted an event open to the general public, did not 
have security screenings, drew large crowds, and would draw media attention at the local, 
regional, and national levels. The Boston Marathon attack did not directly target 
transportation or specific infrastructure functions in Boston with the intent of crippling 
the city’s essential functions. 

A terrorist interest lies not in the functions that a facility provides, such as a high 
demand electrical substation responsible for regional power generation, but instead 
focuses on accessible areas that are attractive targets for attacks. Targetability is the 
primary motivation of the terrorist over the criticality of the facility. 

M. IMPLICATIONS FOR CRITICAL INFRASTRUCTURE PROTECTION 

MISSION 

Preventing terrorism at the individual level requires developing methods to 
identify individuals as they ascend up the staircase to terrorism and stop them before they 
reach the highest level where an attack is planned or carried out. This approach is rooted 
in the cause rather than the consequence, and can be applied to the Cl mission, which 
should evaluate the motivation and value to a terrorist when determining the risks of 
terrorist attacks on Cl facilities. In the same way that it is impossible to stop every 
individual from carrying out a terrorist attack, it is impossible to protect every facility 
from every threat. Evaluating if a facility is a viable target, determining how to protect 
against the most likely form of attack, and then deciding if a reasonable protective 
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measure exists that would be a more efficient method of protecting, or not protecting, Cl 
facilities. 

Colonel Warden’s The Enemy as a Systern^^^ addresses infrastructure as the 
systems that are so important that “even minor damage to essential industries may lead 
the command element to make concessions.The concessions may come because: 

• Damage to organic essentials/essential systems (Cl) leads to the collapse 
of the system. 

• Damage to organic essentials/essential systems (Cl) makes it physically 
difficult or impossible to maintain a certain policy or to fight. 156 

• Damage to organic essentials/essential systems (Cl) has internal political 
or economic repercussions that are too costly to bear.”i57 

The homeland security definition of Cl is very similar to Warden’s concept of organic 
essentials. DHS defines Cl as “the assets, systems, and networks, whether physical or 
virtual, so vital to the United States that their incapacitation or destruction would have a 
debilitating effect on security, national economic security, national public health or 
safety, or any combination thereof.”i58 Warden states that organic essentials cause a 
collapse of the system, which is the same as saying “debilitating effects.” The systems 
that make it impossible to maintain a fight are the systems “vital to security, national 
public health, and safety.” The organic essentials that cause great political and economic 
repercussion are the same as those that endanger the “national economic security.” The 
current definition that DHS uses to describe Cl closely aligns with Warden’s organic 
essentials to target during strategic warfare. 

The 2013 National Infrastructure Protection Plan operates under the assumption 
that “both domestic and international critical infrastructure assets represent potential 
prime targets for adversaries. Given the deeply rooted nature of these goals and 

153 Warden, “The Enemy As a System.” 

154 Ibid. 

155 Warden, “The Enemy As a System.” 

156 Ibid. 

157 Ibid. 

158 “What is Critieal Infrastmeture? 
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motivations, critical infrastructure likely will remain highly attraetive targets for state and 
non-state aetors and others with ill intent. ”1^9 Based on this researeh, IP efforts are 
framed under an inaeeurate assumption of the terrorist threat to them. Cl proteetion 
polieies should not be the foeus on large-seale attaeks to faeilities when they have not 
been the target of the largest domestie terrorist attaeks and have rarely been the target of 
the 130,000 terrorist attaeks aeross the world over the last 50 years. Terrorists have not 
previously targeted infrastrueture and are unlikely to ehange their intentions in the future, 
whieh means that the way DHS views proteeting infrastrueture and preventing terrorism 
needs to be reformed. 

Mueh of the eurrent IP analysis eondueted by DHS foeuses on the attributes of 
individual faeilities within separate funetional seetors or subseetors of infrastrueture. 
Military warfare strategies hinge on understanding the entire system that allows an enemy 
to funetion and then targeting the weaknesses that eauses failures aeross the system. The 
foeus on individual faeilities that provide separate funetions laeks the network-wide 
viewpoint neeessary to understand eritiealities and assign priorities within the entire 
infrastrueture system, whieh prevents DHS from aoeomplishing the statutory proteetion 
mission. 


Department of Homeland Security, Supplemental Tool: Executing a Critical Infrastructure Risk 
Management Approach. 
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V. DESTRUCTION OF FACILITIES DHS CURRENTLY 
DEFINES AS CRITICAL INFRASTRUCTURE AND THE 
UNEXPECTED RESULTS 


The WTC, the Las Vegas Strip easinos, and the toxic contamination of the Elk 
River in West Virginia (resulting in a municipal water system outage) all serve as unique 
case studies for challenging the designation of these facilities as CL Each of these 
facilities would currently be categorized as critical with the 16 infrastructure sectors. The 
facilities that DHS designates as Cl should cause debilitating impacts to the nation if 
destroyed, but what if the loss of these facilities did not even have a debilitating impact 
on a local level? The destruction of the original WTC, the destruction of 14 Eas Vegas 
Strip casinos, and the chemical contamination of the sole water source in Charleston, 
WV, did not result in result in debilitating local impacts. Inversely, the New York and 
Eas Vegas cases unexpectedly lead to positive economic impacts at the local level. 

It should be noted that the loss of human lives can occur with the destruction of 
critical facilities, but the IP mission is not always focused on reducing human loses. In 
2013, 32,719 traffic collision fatalities occurred on roadwaysthat fall under the Cl 
transportation systems sector but it is the mission of DHS to protect the physical 
transportation infrastructure from terrorist attacks rather than investing resources to 
prevent thousands of annual deaths from occurring during vehicle accidents on the 
highways. It is within the scope of DHS mission to assess how a bridge could be 
attacked with explosives by terrorists, but not to assess if installing higher guardrails 
could prevent a car from accidently driving off the bridge. 

The CE sector is an example of facilities currently deemed to be Cl, but the 
analysis within the following case studies shows that the buildings were not essential to 
the nation, not single points of failure, and not providing functions upon which other 

160 National Highway Transportation Safety Administration, Traffic Safety Facts 2013 Data 
(Washington, DC: U.S. Department of Transportation, 2015), http://www-nrd.nhtsa.dot.gov/Pubs/ 
812181.pdf 

“Transportation Systems Seetor,” Mareh 25, 2013, http://www.dhs.gov/transportation-systems- 

seetor. 


71 



infrastructure systems were to depend. If the CF seetor is found to not be eritieal, it may 
be due to redundant and resilient funetions within this seetor. As the analysis of the 
Lower Manhattan offlee market demonstrated, resiliency occurs within the subseetors, 
and as a result, the impaets from faeility losses were not nationally, regionally, or even 
loeally signifieant. In New York, when offiee buildings were destroyed by the 9/11 
attaeks, others were readily available to absorb the demand for offiee spaee within the 
loeal market. 

Refining the methodology for how faeilities are eategorized as eritieal, or not 
eritieal, ean reduee the total number of Cl faeilities and the overall eomplexity of 
evaluating infrastrueture. Removing the “eritieal” designation from faeilities that do not 
eause national devastation or easeading effeets to other infrastrueture ean be benefieial by 
allowing DHS to refoeus resourees on fulfilling the department’s statutory mission of 
proteeting essential infrastrueture systems. 

A. CASE STUDY: HOW THE LOSS OF WORLD TRADE CENTER WAS 
CRITICAL TO REDEVELOPING LOWER MANHATTAN 

The large brokerage houses that onee lined Wall Street and its eavemous 
side streets have spread far and wide in Manhattan, a refieetion of how the 
area south of Chambers Street is no longer the dominant finaneial serviees 
eenter it onee was. With aging buildings that eannot aeeommodate huge 
eomputers, and a deelining need for finaneial eompanies to be near eaeh 
other. The Street and its neighborhood are mere reminders of what they 
onee were. 

— New York Times, 19941^2 


A steady exodus of banks, brokerage houses and insuranee eompanies in 
reeent years has left the eapital of eapitalism struggling at the very 
moment the eeonomie system it epitomizes is sweeping the planet. 

— Boston Globe, 19961^2 


1^2 Thomas Lueck, “Wall Street, No Longer Finaneial Epieenter, Straggles to Cling to Caehet,” The 
New York Times, December 26, 1994, http://www.nytimes.com/1994/12/27/nyregion/wall-street-no-longer- 
fmancial-epicenter-straggles-to-chng-to-cachet.html. 

1^2 Peter Gosselin, “Wall Street Flits the Wall As Financial World Spins, Leading Firms Depart the 
Nation’s Economic Capital,” The Boston Globe, June 28, 1996, http://www.highbeam.com/doc/lP2-837 
3110.html 
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I think it is inevitable that Downtown [Lower Manhattan] will reinvent 
itself once again. The process is already underway, and I am very 
optimistic about its future. 


— David Rockefeller, 20021^4 


It’s 1 World Trade Center’s stunning combination of ultra-modern design 
and super-sustainable efficiency that makes it a truly towering 
achievement. 

— WTC.com Marketing Material, 2015 

Before September 11, 2001, twin landmark towers stood over the New York City 
skyline (Figure 20) but many of today’s amenities that make Lower Manhattan one of the 
most valuable real estate markets in the world did not. No Fulton Street Transit Center 
existed to organize a jumble of train lines and buses. A walkable park hosting more than 
500 free concerts and waterfront condominiums stretching along the Hudson River also 
did not exist. The Downtown Connection bus line did not bring 800,000 annual riders to 
the area. Thirty billion dollars in combined public and private investment was not 
available to transform the aging WTC into gleaming Class-A Leadership in Energy and 
Environmental Design (EEED) Platinumi^^ property. Visitors now stay in nearly 8,000 
hotel rooms, which is triple the number that existed before 2001.^^^ 

The 9/11 attacks were the largest loss of life in American history from terrorism 
but out of the rubble, the economic landscape of Eower Manhattan transformed in a 
manner that would never have been possible without the total loss of WTC. 


Alliance for Downtown New York, Inc., ADNY Annual Report 2014 (New York: Alliance for 
Downtown New York, Inc., 2014), littp://www.downtowimy.com/sites/default/files/Annual%20Report 
2015_Final_Web2.pdf 

“About: LEED Certification,” accessed Retrieved July 23, 2015, http://www.usgbc.org/leed. 
166 “adNY Annual Report 2014.” 
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Figure 20. New York City Skyline in 1995 and 2014 


From “ADNY Annual Report 2014,” 2014, http://www.downtownny.com/sites/default/ 
fdes/Annual%20Report_2015_Final_Web2.pdf 


1. Commercial Real Estate in Manhattan 

Manhattan is now one of the largest commercial office markets in the world. 
According to 2014 tax records, 1,941 commercial office buildings are valued at $95.6 
billion.i®^ In 2000, it was assessed at $42.9 billion^®* ($58.9 billion adjusted to 2014 
inflationi69)^ which shows the property values have almost doubled in the last 13 years 
since the 9/11 attacks, as shown in Figure 21. 

While the destruction of the WTC caused a major impact to the area, things were 
not in great shape prior to the attack. The year 1995 was the lowest point in a troubled 
decade for Lower Manhattan. Nineteen of the 20 largest stock brokerage houses had 


167 Office of Tax Policy, Annual Report: New York City Property Tax FY 2014 (City of New York: 
Department of Finance, 2014), http://wwwl.nyc.gov/assets/finance/downloads/pdf/reports/reports-pro 
perty-tax/nyc_property_fyl4fmvandav.pdf 

168 Office of Tax Policy, Report on New York City Property Tax FY 2000 (City of New York: 
Department of Finance, 2000), http://wwwl.nyc.gov/assets/finance/downloads/pdf/99pdf/rptsum00.pdf 

169 “u.S. Inflation Calculator,” accessed July 23, 2015, http://www.usinflationcalculator.com/. 
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closed, 18 of the 20 largest advertising firms had left, and only seven of the original 35 
Broadway theaters remained open. 

The flight of major brokerage houses and investment banks has left the 
neighborhood burdened by old offiee buildings, with nearly a quarter of 
their spaee vaeant, and with their prospeets of luring tenants undermined 
by small floors, poor ventilation and wiring, and outdated arehiteeture. 

Now, while they still need larger and more modern buildings than ean be 
found on the bloeks around Wall Street, he said the priority of many of the 
seeurities eompanies is to find the best deals they ean strike on eorporate 
real estate, with few reservations about moving off the beaten path in 
Manhattan. 170 


Figure 21. Assessed Property Values in Lower Manhattan between New York 

City Fiseal Year 1991-2000 

% B illio n s 



1 99 1 1 992 1 993 1 994 1 995 1 996 1 997 1 998 1 999 2000 

From Office of Tax Policy, Report on New York City Property Tax FY 2000 (City of New 
York: Department of Finance, 2000), http://wwwl.nyc.gov/assets/finance/downloads/ 
pdf/99pdf/rptsum00.pdf 


Tax ineentives and large amounts of vaeant offiee spaee allowed tenants outside 
the finaneial industry to move into Lower Manhattan. In 1996, major tenant additions 
ineluded Ameriean Airlines, Pfizer Ine, and Gruner & Jahr USA Publishing. The Mayor’s 
revitalization plan also ealled for eonverting offiee spaees into residential properties. 
Vaeaney rates still remained around 70% and the square footage rate for the Ameriean 


170 Lueck, “Wall Street, No Longer Financial Epicenter, Struggles to Cling to Cachet.” 
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Airlines 15-year lease was only $33 ($45.3 adjusted to 2014 inflation) per square/foot 
(the new WTC is currently leasing for $72/ft).i^i 


At the center of the changing office market, which was transitioning from 
stockbrokers and advertising to a variety of international businesses, was the WTC 
towers. The Twin Towers were designed and built during the heyday of big Wall Street 
brokerage houses and included 7.6 million square feet of space, which were not designed 
for computers and modern office amenities. In 1995, the WTC had a 25.1% vacancy rate, 
which meant that nearly 2 million square feet of space were vacant (an entire 40-story 
high-rise building of empty space). 1^2 enormous amount of vacant space at the WTC 
negatively impacted real estate and rental prices throughout the entire area. 

2. Loss of the World Trade Center 

In the aftermath of 9/11, without the WTC (original or new) the office space 
market in Manhattan was well positioned for growth. In 2004, the City of New York 
Independent Budget Office, 

forecasted that office employment would regain the peak it had reached in 
2000 by 2010. It appeared that currently vacant space, as well as space 
expected to come on-line during the 2005-2010 period (i.e.. Time Warner 
Center, 1 Bryant Park, the New York Times building, and the Bloomberg 
building) would be sufficient capacity to accommodate the new workers 
even while the trade center buildings remained under construction. 1^3 

According to the Independent Budget Office, 

the destruction of the World Trade Center and damage to surrounding 
buildings removed roughly 30 percent of the downtown Class-A office 
inventory. Contrary to expectations, this loss did not result in a spike in 
rents caused by the precipitous decline in supply. Instead, the spreading 


121 Mervyn Rothstein, “The Former Mobil Building, Largely Vaeant in the 90’s, Gets a New Tenant, 
Ameriean Airlines,” The New York Times, Oetober 29, 1996, http://www.nytimes.eom/1996/10/30/bus 
iness/former-mobil-building-largely-vaeant-90-s-gets-new-tenant-ameriean-airhnes.html. 

122 Charles Bagli, “Guardian Insuranee’s Plan Adds to Downtown Rebirth,” The New York Times, 
January 8, 1998, http://www.nytimes.eom/1998/01/09/nyregion/guardian-insuranee-s-plan-adds-to- 
downt own-rebirth. html. 

123 City of New York Independent Budget Offiee, Response to Request to Examine Critical Issues 
Underlying the Planned Rebuilding at the World Trade Center Site (City of New York: Independent 
Budget Offiee, 2006), http://www.ibo.nye.ny.us/iboreports/stringerwtelet.pdf 
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impact of employment losses due to the loeal reeession that had started in 
the spring of 2001 and accelerated after the attaek, combined with the 
existenee of leased but unoccupied ‘shadow spaee’ in midtown and 
downtown, enabled the real estate market to absorb most of the displaeed 
tenants with little effeet on rents. Instead, downtown vaeaneies grew and 
rents fell during 2002 before stabilizing somewhat during 2003 and 
2004.174 

As demonstrated by Figure 22, eommereial office leasing peaked in 2002 following the 
loss of the WTC and the need to seeure new office spaces. Above-average leasing 
eontinued in 2003 and 2004. As the new WTC and other redeveloped Lower Manhattan 
properties have opened, offiee-leasing aetivity peaked in 2013 and 2014. 


Figure 22. Lower Manhattan Commereial Leasing Aetivity 2001-2014 



From Alliance for Downtown New York, Inc., Lower Manhattan Real Estate Market 
Overview (New York: Alliance for Downtown, 2014), http://www.downtownny.com/ 
sites/default/files/Q2%202014%20FINAL%20REPORT.pdf 

3. Creating New Markets 

The eritieality of an individual faeility, even an enormous eommereial faeility like 
the original WTC, is nearly impossible to evaluate beeause even though it seems to be 
eounterintuitive, the destruetion of the old WTC allowed for the ereation of a more 
valuable faeility. 

^74 City of New York Independent Budget Office, Response to Request to Examine Critical Issues 
Underlying the Planned Rebuilding at the World Trade Center Site. 
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The original seven building WTC site eontained 11.2 million square feet of office 
space, which accounted for 4% of the total office inventory in Manhattan.i^^ If the 
original WTC were 100% occupied with the hotel maintaining peak average occupancy, 
the combined site properties would generate a maximum of approximately $545 million 
in annual revenue, as demonstrated in Table 3. 


Table 3. Original World Trade Center Maximum Leasing Revenue Estimate 


Property 

Square Footage^’*’ 

Price per Square- 
Foot 

Total (Adjusted to 
2014 Inflation) 

1 World Trade Center 

3.8 million 

$47.00177 

$178,600,000 

($245,534,550) 

2 World Trade Center 

3.8 million 

$47.00 

$178,600,000 

($245,534,550) 

3 World Trade Center 
(Marriott Hotel) 

825 hotel rooms 

86.7% occupancy X 
$280/nightX 365178 

$73,101,105 

($100,497,463) 

4 World Trade Center 
(9-Story Low-rise) 

200,000 
(estimated 1^^) 

$47.00 

$9,400,000 

($12,922,871) 

5 World Trade Center 
(9-Story Low-rise) 

200,000 (estimated) 

$47.00 

$9,400,000 

($12,922,871) 

6 World Trade Center 
(8-Story Low-rise) 

180,000 (estimated) 

$47.00 

$8,460,000 

($11,630,583) 

7 World Trade Center 
(retail/47 stories) 

1.86 millionl^*^ 

$47.00 

$87,420,000 

($120,182,701) 

Total: 

14 millionl^l 


$544,981,105 

($749,225,591) 


“World Trade Center,” July 9, 2015, http://www.newworldencyclopedia.org/entryAVorld_Trade_ 

Center. 

176 “World Trade Center.” 

City of New York Independent Budget Office, Response to Request to Examine Critical Issues 
Underlying the Planned Rebuilding at the World Trade Center Site. 

178 HVS Global Hospitality Services, 2012 Manhattan Hotel Market Overview (Mineola, NY: HVS 
Global Hospitality Services, 2012, http://www.hvs.com/Content/3268.pdf 

“Key Office Properties,” accessed July 23, 2015, http://davispartners.com/management/key-office- 
properties/. 

180 Pederal Emergency Management Agency, World Trade Center 7 Building Performance Study 
(Washington, DC: Department of Homeland Security, 2002), http://www.fema.gov/media-library/assets/ 
documents/3544. 

Jason Bram, James Orr, and Carol Raraport, “Measuring the Effects of the September 11 Attack on 
New York City,” FRBNYEconomic Policy Review, November 1, 2002, http://www.newyorkfed.org/resear 
ch/epr/02v08n2/021 lrapa.pdf 
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To attract tenants from multi-national corporations, and compete with surrounding 
properties, premium eommereial offiees are designated as “Class A.” Offiee spaee rental 
prices are grouped in three elasses by the Building Owners and Managers Assoeiation 
International (BOMA). The elasses inelude: 

• Class A—Most prestigious buildings eompeting for premier offiee users 
with rents above average for the area. Buildings have high quality standard 
finishes, state of the art systems, exeeptional aeeessibility, and a definite 
market presenee. 

• Class B—Buildings eompeting for a wide range of users with rents in the 
average range for the area. Building finishes are fair to good for the area. 
Building finishes are fair to good for the area and systems are adequate, 
but the building does not eompete with Class A at the same priee. 

• Class C—Buildings eompeting for tenants requiring functional space at 
rents below the average for the area. 1^2 

By today’s standards, the original WTC, whieh was built in the 1970s, would 
likely not meet the eriteria for a Class A building, and subsequently, would not demand 
the highest rates and draw the premier tenants paying top dollar. The new WTC is 
designated “Class A” and if the buildings are 100% leased, the total leasing revenue will 
exeeed $1 billion annually. See Table 4. 


1^2 “Building Class Definitions,” accessed July 23, 2015 http://www.boma.org/research/Pages/build 
ing-class-definitions.aspx. 
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Table 4. New World Trade Center Maximum Leasing Revenue Estimate 


Property 

Square Footage 

Price per 
Square-Foot 
(annual) 

Total 

1 World Trade Center 

3 million (Class A office) 

$72.44183 

$217,320,000 

2 World Trade Center 

2.8 million (Class A office) 

$72.44 

$202,832,000 

3 World Trade Center 

2.5 million (Class A office) 

$72.44 

$181,100,000 

4 World Trade Center 

2.3 million (Class A office) 

$72.44 

$166,612,000 

7 World Trade Center 

1.7 million (Class A office) 

$72.44 

$123,148,000 

World Trade Center 
Transportation Hub 

350,000 (retail) 

$319.00184 

$111,650,000 


12.65 million 


Total: 

$1,002,665,000 


The new WTC buildings have the potential to generate $250 million more in 
annual revenue than the old buildings. This total would likely be much higher because the 
old Twin Towers would struggle to compete with surrounding premium office spaces or 
the excess office space across the entire Lower Manhattan office market would 
collectively drive down properties values. Instead, the new WTC buildings are the 
cornerstone of the revitalized Lower Manhattan office market. 

4. Cost of 9/11 Attack versus Economic Impacts of Redevelopment 

A 2002 study by the Lederal Reserve Bank of New York Economic and Policy 
Review estimate the total losses from the 9/11 attacks including earning losses, property 
damage, and cleanup to be between $33 and $36 billion.i^^ Of those losses, the physical 
losses shown in Ligure 23 total $21.6 billion. 


183 j^gy Mashayekhi, “Class A Rents in Midtown Rebound; Midtown South Sees ‘Hiteh’” The Real 
Deal - New York Real Estate News, May 1, 2015, http://therealdeal.eom/blog/2015/05/01/elass-a-rents-in- 
midtown-rebound-while-midtown-south-sees-hiteh/. 

Mashayekhi, “Class A Rents in Midtown Rebound; Midtown South Sees ‘Hiteh.’” 

Bram, Orr, and Raraport, “Measuring the Effeets of the September 11 Attaek on New York City.” 
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Figure 23. Measuring the Effects of the September 11, 2001 Attack 

on New York City 


Physical capital 


Cleanup ami site restoration 

$1.5 billion 

Completed June 2(X)2; expenses covered by the Federal 
Emergency Management Agency (FEMA) 

Destroyed buildings in World Trade 
Center complex 

Approximately 14 million square feet, 

$6.7 billion to rebuild 

Book value of towers at $3.5 billion; complex 
privately insured 

l>amaged buildings in Work! Trade 
Center area 

Approximately 15 million square feet, 

$4.5 billion 

Inclusion of damage to Class B and C space raises 
estimate to 21 million si|uare feet 

Ca>ntents of buildings in World Trade 
Center complex 

$.5.2 billion 

Significant oft^t from private insurance 

Public infrastructure 

Subway 

PATH 

Utilities 

$850 million 
$550 million 
$2.3 billion 

Estimated repair cost; signifK'ant offset from private 
insurance and/or FEMA for repair to all three 
components of infrastructure 


Total capital loss 


$21.6 billion 


From Jason Bram, James Orr, and Carol Raraport, “Measuring the Effects of the 
September 11 Attack on New York City,” FRBNY Economic Policy Review, November 
1, 2002, http://www.newyorkfed.org/research/epr/02v08n2/021 lrapa.pdf 


While the loss totals appear to be staggering, they are dwarfed by the positive 
economic impacts of the redevelopment, which were estimated to be $15.7 billion 
annually (direct, indirect, and inducted) in a study produced for the Lower Manhattan 
Development Corporation, as shown in Figure 24.1^® 


Figure 24. Economic Impact of Redeveloping the World Trade Center Site 


Redevelopment of the World Trade Center Site: 

Summary of Economic Impact: Construction and Operations 


Direct, Indirect, and Induced Impact of 
Construction through 2015 

Direct, Indirect, and Induced Impact 
of Operations in 201S 


Cumulathe 

Ou^xjt 

(Sbilions) 

Range 

Avg Annual 
&nployment (FTE) 
Range 

Cumulative 

Tax Revenue 
(Smllions) 
Range 

Annual 

OU^MJt 

(Sbilions) 

Annual 

Emptoyment 

fTE) 

Annual Tax 

Revenue 

($milions) 

NYC 

14.02-15.42 

7,760-8,530 

149-184 

15.70 

76,950 

425 

NYS 

16.38-18.02 

9,740-10,650 

261 - 287 

16.40 

89,820 

460 

NY-NJ Metro^ 

17.62-19.38 

10,090-11.030 

411 -451 

16.36 

84,820 ’ 

865 


From Appleseed, Economic Impact of Redeveloping The World Trade Center Site: New 
York City, New York State, And the New York—^New Jersey Area (New York: 
Appleseed, 2003), http://www.renewnyc.org/content/pdfs/Appleseed.pdf 


Appleseed, Economic Impact of Redeveloping The World Trade Center Site: New York City, New 
York State, And the New York—New Jersey Area (New York: Appleseed, 2003), http://www.renewnyc.org/ 
content/pdfs/Appleseed. pdf 
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5. 


Conclusion 


The loss of the life at the original WTC was a tragic event but with it, the sudden 
disappearance of the original WTC buildings caused a significant decrease in total 
square-footage of available office space, which served to stabilize an oversaturated and 
declining commercial real estate market in Lower Manhattan. Through public and private 
investment, the new WTC has been constructed to be more efficient in design that meets 
the office market demands of premium clientele in Manhattan. The smaller but more 
luxurious office footprint draws nearly double the price per square-foot and provides 
more retail, transit, cultural, and public spaces for the general consumer. 

The $21.6 billion estimate of the capital losses^^^ ($16.4 in physical buildings) 
associated with the 9/11 attack only represent direct losses impacting the WTC itself Cl 
is defined by the interconnectivity of the systems within each sector and across multiple 
sectors. Manhattan has an estimated $804.4 billion office marketi*^ with 32.8 million 
square-feet of office space. Compared to the overall office market, the loss of the WTC 
represented 2% of the total commercial office building value while also being 29% of 
total office space (in an oversaturated market). In addition to stabilizing the office leasing 
market, redevelopment has transformed the mid-1990s Lower Manhattan, which did not 
offer premier real estate, luxury shopping, world class hotels, destination dining, and 
tourism, into an area that produces cumulative consumer spending of $5.2 billion 
annually according to the 2014 Lower Manhattan Real Estate Market Overview produced 
by the Alliance for Downtown New York. 1^9 


Appleseed, Economic Impact of Redeveloping The World Trade Center Site: New York City, New 
York State, And the New York—New Jersey Area. 

188 New York City Department of Finance, Tentative Assessment Roll: Fiscal Year 2008 (New York: 
Department of Finance, 2007), http://wwwl.nyc.gov/assets/finance/downloads/pdf/07pdf/assessment_re 
port_08.pdf 

189 Alliance for Downtown New York, Inc., Lower Manhattan Real Estate Market Overview 2014 
(New York: Alliance for Downtown New York, Inc., 2014), http://www.downtownny.com/sites/default/ 
fdes/Q2%202014%20FINAL%20REPORT.pdf 
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6. Impact to Critical Infrastructure Definition 

The 2006 Homeland Security Advisory Council—Report on Critical 
Infrastructure Task Force reported that the impaets of terrorism and 9/11 extended “well 
beyond the direct ‘ground zero effects’ and were exacerbated by citizens’ choices based 
on their altered perception of risk. Ultimately, the ability of Cl to full recover from a 
catastrophe depends on the actions of the consumers.’’i^o The exact “ground zero” 
location of the 9/11 attack has become a tourism destination of itself. The 110,000- 
square-foot National September 11 Memorial Museum was initially expected to draw 2.5 
million visitors per year but exceeded 500,000 visitors during the first two months of 
operation in May and June 2014.191 The number of hotel rooms in Lower Manhattan near 
the location of the attacks has tripled since 2001, which demonstrates significant interest 
as a destination for tourists (Figure 25). 


Figure 25. Number of Hotel Rooms in Lower Manhattan 

LOWER MANHATTAN HOTEL ROOM GROWTH BY YEAR 

Source: Downtowrt Allaoce 
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From Alliance for Downtown New York, Inc., Lower Manhattan Real Estate Market 
Overview 2014 (New York: Alliance for Downtown New York, Inc., 2014), http://www. 
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190 Homeland Security Advisory Council, Report of the Critical Infrastructure Task Force 
(Washington, DC: Department of Homeland Security, 2006), 6, http://www.dhs.gov/xlibrary/assets/HSAC 
CITF_Report_v2.pdf 

191 Alliance for Downtown New York, Inc., Lower Manhattan Real Estate Market Overview 2014. 
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The loss of the original WTC is a ease that is opposite to the prineiples of a 
faeility being “eritieal infrastrueture.” Rather than eausing debilitating and easeading 
negative impacts to the nation or surrounding region, the loss of the buildings was a net- 
positive to the components of the CF sector in Lower Manhattan. It is unlikely a viable 
plan would have been available to demolish and rebuild the WTC without an unplanned 
event destroying it. Without the 9/11 attack, the continued existence of the original Twin 
Towers would have resulted in sustained over-saturation of the Manhattan office market 
with an excess amount of outdated and undesirable Class B office space. Over the past 
decade, the office market pressure has continued to grow for LEED Certified and Green 
Office space, which would have continued to decrease the price per square-foot at the 
WTC as surrounding buildings drew away Class A customers. 192 The enormous amount 
of office space within the original Twin Towers would have likely continued to depress 
the surrounding market and economic growth, and deter capital investment into the area. 

The original WTC buildings, and CE in general, should not be considered “critical 
infrastructure” because commercial markets are too complex with numerous contributing 
variables for DHS or a group of industry representatives to make assumptions that 
individual facilities are supremely important. It is very unlikely that anyone would have 
said the largest building in New York City was not critical, but the destruction of it paved 
the way for massive redevelopment and economic growth, as seen in Figure 26. 


Figure 26. Advertising Materials for the new 1 World Trade Center Building 



From “Ftome: World Trade Center,” aeeessed July 23, 2015, https://www.wte.eom/. 


192 “xhg Business Case for Green Building,” aeeessed July 23, 2015, http://www.usgbe.org/artieles/ 
business-ease-green-building. 
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Figure 27. 1 World Trade Center website 



The patriotic cache of 1 World Trade Center is evident from its address, as \well as its original 
Freedom Tower title. But while 1 One World Trade Center's height both makes and references history 
— at a symbolic 1,776 feet in height and a towering 102 stories, it will be the tallest building in the 
city — 1 World Trade Center is also an eye-opening exemplar of green design. 

With 69 floors of class-A office space, 1 World Trade Center will devote 2.6 million square feet to 
class-A office space, although a showcase lobby with soaring 80-foot ceilings, television broadcast 
floors, an observation deck and several restaurants are also part of Skidmore, Owings and Merrill's 
design. But while 1 World Trade Center will rival the original World Trade Center in versatility and far 
surpass it in aesthetics thanks to its fluid, tapering glass-draped look, 1 World Trade Center will also 
stand out for its stellar sustainable elements. The Freedom Tower's green aspects encompass both 
the expected top-of-the-line sustainable technologies — energy-efficient windows, recycled 
construction materials, interior daylighting and assorted other state of the art building management 
systems — to such unexpected and uncommon green design elements as the reuse of rainwater. 

1 World Trade Center's symbolic importance is not lost on any New Yorker and its airy, efficient, and 
ideally located 2.6 million square feet of class-A office space will make an instant impression on the 
Financial District. But it's 1 World Trade Center's stunning combination of ultra-modern design and 
super-sustainable efficiency that makes it a truly towering achievement. 


From “One World Trade Center,” aeeessed July 23, 2015, http://www.greenbuildingsnye. 
eom/?p age=121&eat=36. 


B. CASE STUDY: LAS VEGAS CASINOS AND CRITICAL 
INFRASTRUCTURE 

The National Strategy for the Physical Protection of Critical Infrastructure and 
Key Assets assigned DHS with the responsibility to 

develop a uniform methodology for identifying facilities, systems, and 
functions with national-level criticality to help establish protection 
priorities; build a comprehensive database to catalog these facilities, 
systems, and functions; and maintain a comprehensive, up-to-date 
assessment of vulnerabilities and preparedness across critical sectors. 1^3 


Moteff, Copeland, and Fischer, Critical Infrastructures: What Makes an Infrastructure Critical?. 
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Below the national level, DHS’s Regional Resiliency Assessment Program evaluates 
clusters of Cl and key resources with a geographic area. 

In a regional geographic area, jurisdictions have different interpretations of the 
types of facilities critical to their jurisdiction, to the larger region and the nation. In Clark 
County, NV, 

the protection of the Nation’s infrastructure assets (or “critical 
infrastructure”) from disruption and destruction is a primary function and 
concern of all levels of government. Clark County, internationally known 
for the Las Vegas Strip and lavish casino entertainment, is unique in that 
the structure of the local economy is built primarily on gaming. In the 
evaluation of critical assets in Las Vegas, Nevada, the most important 
assets are clearly the casinos and glitter of the Strip. 1^4 

President Policy Direction/PPD-21 defined Cl as the “systems and assets, 
physical or virtual, so vital to the United States that the incapacity or destruction of such 
systems and assets would have a debilitating impact on security, national economic 
security, national public health and safety, or any combination of those matters.The 
Clark County: Critical Infrastructure and Key Asset report describes the international and 
nation significance of Las Vegas and The Strip’s casinos as the most critical assets, but 
are these CF even critical at the local level? See Figure 28. 


Urban Environmental Research, EEC, Clark County: Critical Infrastructure & Key Assets Final 
(Clark County, NV: Urban Environmental Research, EEC, 2008, http://www.clarkcountynv.gov/Depts/ 
comprehensive_planning/nuclear_waste/Documents/Studies/CCCriticalInfrastructure0508.pdf. 

195 jjjg \ythte House, Presidential Policy Directive—Critical Infrastructure Security and Resilience 
Presidential Policy Directive/PPD-21—Critical Infrastructure Security and Resilience. 


86 




Figure 28. Image of the “Fabled” Riviera Casino That Closed on May 4, 2015 



From Brandon Griggs, “Fabled Las Vegas Casino Closes after 60 Years,” CNN, May 5 
2015, http://www.cnn.eom/2015/05/05/travel/riviera-hotel-casino-vegas-closes-feat/. 


1. What Gaming Facilities Subsector Members Expect from DHS 

The National Infrastructure Protection Plan: Commercial Facilities Sector — 
Annex 2: Gaming Facilities Subsector deseribes the facilities in the sector as soft targets 
vulnerable to the public’s fear and perceptions of security. To protect casinos from 
potential terrorist attacks, the costs of making physical changes are significant and a need 
exists for tax incentives to reduce the economic burden on owners for making 
improvements. The goal of the subsector is to “implement security measures that are 
efficient, cost-effective, and as unobtrusive as possible.Across the gaming subsector, 
facilities have “expressed concerns over sharing assessment information with the Federal 


196 Department of Flomeland Security, Commercial Facilities Sector-Specific Plan an Annex to the 
National Infrastructure Protection Plan 2010, 81. 
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Government for any initiative that makes formal decisions on the prioritization of assets 
(e.g., concluding that one asset is more ‘at risk’ than another). 

The gaming subsector cites $5.6 billion in direct gaming tax revenuei^s as the 
justification for federal resources and protection as Cl facilities, but the requests of the 
subsector council include tax incentives, which would reduce this revenue. To distribute 
resources across 445 facilities effectively, DHS must make a determination of risk, 
priority, and criticality but the gaming subsector also does not support any effort to 
document one facility as more important than others. 

2. Las Vegas Casinos 

In planning for protection of a Cl facility, such as a Las Vegas casino, protective 
measures would address the use of explosives by terrorists to damage or destroy the 
building. Since the economic depression in 2006, explosives have destroyed many of The 
Strip’s “critical” casinos but these explosives were planned detonations to implode vacant 
buildings intentionally. Since 2006, the Castaway, Boardwalk, Bourbon Street, Stardust, 
New Frontier, and Klondike casinos have all been imploded. During the same time 
period, the Lady Luck, Sahara, Western, O’Shea’s, Gold Spike, and Riviera casinos have 
all closed. The implosion of six casinos and the closure of six others over the last 
decade means that 12 of Las Vegas’ 87 casinos (currently 75 are open), or 14%, of these 
Cl facilities have been lost.^oo The loss of a critical facility should result in debilitating 
impacts to the nation, so how has the loss of 12 critical facilities impacted the local area 
in Las Vegas? 

From 2005 to 2013, the population of Las Vegas has increased from 544,608 to 
603,448 (Figure 29). Real per capital income increased slightly from 2005-2007 before 
dipping to 15% lower than pre-casino closures at $25,918 in 2013 (Figure 30). 

^97 Department of Homeland Security, Commercial Facilities Sector-Specific Plan an Annex to the 
National Infrastructure Protection Plan 2010, 83. 

198 Ibid. 

199 “Yet Another Las Vegas Casino History Timeline,” accessed July 23, 2015 http://www.lvrevealed. 
com/deathwatch/las_vegas_timeline.html. 

200 “Complete List of Las Vegas Casinos,” February 1, 2015, http://vegasclick.com/vegas/casinos. 
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Residential rental rates have remained fairly eonstant over the same time period (Figure 
31). 


Figure 29. Population of Las Vegas, NV, by Year 
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From U.S. Census Bureau, “Publie Data from U.S. Census Bureau,” Google.eom, 
February 5, 2015, http://www.google.com/publiedata/explore?ds=kf7tggluo9ude_&met_ 
y=population&idim=place: 3240000:3260600:3231900&hLen&dLen#! ctype=l&strail=f 
alse&bes=d&nselm=h&met_y=population&seale_y=lin&ind_y=false&rdim=eountry&id 
im=plaee:3240000:3260600:3231900&ifdim=eountry&tstart=l 104642000000&tend=13 
72737600000&hLen_US&dLen&ind=false. 

Figure 30. Nevada Real Per Capita Income per Year 


Real Per Capita Income: Las Vegas, Nevada, National 



From “Las Vegas-Paradise Nevada Flousehold Ineome,” aceessed July 23, 2015, http:// 
www.deptofnumbers.com/ineome/nevada/las-vegas/. 
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Figure 31. Monthly Rental Rates in Las Vegas by Year 
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From “Las Vegas-Paradise Nevada Rent and Rental Statisties,” accessed July 23, 2015, 
http://www.deptofnumbers.com/rent/nevada/las-vegas/. 

In Las Vegas, the easinos are considered to be critical facilities, which would 
result in debilitating impacts to the local economy if they were destroyed, but as 14% of 
the casinos were imploded or closed, the population of the city increased while median 
rental prices and incomes remained fairly constant. 

The casinos that have closed permanently or been demolished in Las Vegas had 
previously been cornerstones of The Strip. The most recent facility to close is the Riviera 
Hotel and Casino, which was the first high-rise, built in the area in 1955, and included 
2,100 hotel rooms. The hotel featured A-list celebrity guests, professional boxing title 
fights, and performers including Elvis Presley and Louis Armstrong.While 1,200 
employees at the Riviera lost their jobs, more than 950,000 of 1 , 029,700202 employable 
people in Las Vegas remain employed maintaining an unemployment rate of 7.2%, which 
is just over the national average of 5.4%.203 


201 Brandon Griggs, “Fabled Las Vegas Casino Closes after 60 Years,” CNN, May 5, 2015, http:// 
www.cnn.eom/2015/05/05/traveFriviera-hotel-casino-vegas-closes-feat/. 

202 “Las Vegas-Paradise, NV Economy at a Glance,” July 21, 2015. http://www.bls.gov/eag/eag. 
nv_lasvegas_msa.htm. 

203 “National Employment Monthly Update,” July 2, 2015, http://www.ncsl.org/research/labor-and- 
employment/national-employment-monthly-update.aspx. 
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If the loss of “critical infrastructure” casinos in Las Vegas did not result in 
widespread detrimental impacts to the city, should these facilities be considered to be 
“critical infrastructure” to Clark County, NV? If the impacts of the closures were 
negligible at the local level, it is unlikely that these casinos have any regional or national 
implications to CL 

3. Resiliency within the Las Vegas Casino Industry 

While the Clark County: Critical Infrastructure and Key Asset report describes 
The Strip’s casinos as the most critical assets, it is not the individual physical properties 
that are critical, it is the overall gaming industry that is essential to the city. The 
individual properties are not critical, as shown by the 12 casinos closed between 2006 
and 2015 without causing major disruptions to the tourism industry (Figure 33), hotel 
occupancy (Figure 33), or gaming revenue (Figure 32). When DHS determines how to 
spend federal funding for providing protection to Cl, not a single casino needs protective 
measures, and it would be prohibitively expensive to protect every casino against all 
threats. In a terrorist attack scenario, simultaneously destroying all 80 casinos on the Las 
Vegas Strip would be the largest terrorist attack in world history, and is very unlikely to 
occur. The gaming industry in Las Vegas is already “protected” by the resiliency within 
the network of eight casinos along The Strip. An attack against a single casino, or group 
of casinos, would not cause the entire gaming industry to crumble because the loss of 12 
casinos to closure has not significantly impacted key indicators (visitors, hotel 
occupancy, and tax revenue). An attack across the entire industry is not realistic. In other 
words, the protection of the key asset (gaming industry) already exists within the current 
system without additional assistance from federal funding and resources. 
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Figure 32. Annual Tax Revenue of Las Vegas Strip Casinos 2001-2012 via 
University of Las Vegas Center for Gaming Researeh 
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From David G. Schwartz, Major Gaming Jurisdiction: Twelve-Year Comparison (Las 
Vegas: Center for Gaming Research, University Libraries, University of Nevada Las 
Vegas, 2013), http://gaming.unlv.edu/reports/12_year_comp.pdf 


Figure 33. Las Vegas Visitor Statisties from 
Visitor and Convention Authority 
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2000 

35,849,691 

3,853,363 

3,722 

124,270 

92.5% 

719% 

891% 

130,550,852 r 

36,865,866 

5,951,009 

7,671,252,000 r 

2001 

35,017,317 

5,014,240 

20,346 a 

126,610 

88 9% 

638% 

84 7% 

129,053,244 

35,179,960 r 

5,967,112 

7,636,547,000 r 

2002 

35,071,504 

5,105,450 

23,031 

126,787 

88 8% 

602% 

84 0% 

127,102,165 

35,009,011 

37.868 b 

7,630,562,000 r 

2003 

35,540,126 

5,657,796 

24,463 
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896% 

60 5% 

850% 

138,941,106 

36,265,932 
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2004 

37,388,781 
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92.0% 
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41 441.531 r 

38,799 
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2005 
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44,267,370 r 

39,649 

9,717,322,000 r 

2006 

38,914,889 

6,307,961 

23,825 

132,605 

932% 
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89 7% 
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46,304,376 r 

40,383 
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2007 
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39,808 
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898% 

578% 

860% 

207,117,817 

44,074.642 r 

37,686 
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2009 

36,351,469 

4,492,275 

19,394 

148,941 

85 3% 

501% 

815% 

153,150,310 

40,469,012 r 

39,199 
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2010 

37,335,436 

4,473,134 

18,004 

148,935 

83 5% 

520% 

80 4% 

163,809,985 

39,757,359 

40,213 

8,908,574,000 t 

2011 

38,928,708 

4,865,272 

19,029 

150,161 

86 9% 

560% 

838% 

194,329,584 

41 481,204 r 

40,344 

9,222,677,000 r 

2012 

39,727,022 

4.944,014 

21,615 

150,481 

874% 

580% 

84 4% 

200,384,250 

41,667,596 

41,706 r 

9,399,845,000 r 

2013 

39,668,221 

5,107,416 

22,027 

150,593 

87.1% 

598% 

84 3% 

210,138,974 

41,857,059 

42,485 

9,674,404,000 r 

2014 

41,126,512 

5,169,054 

22,103 

150,544 

891% 

650% 

868% 

232,443,537 

42,869,517 

42,318 

9,554,002,000 


From “Flistorical Las Vegas Visitor Statistics,” February 1, 2015, http://www.lvcva. 
com/stats-and-facts/. 


The Clark County: Critical Infrastructure and Key Asset report also deseribes that 
a terrorist attaek would deter visitors from traveling to Las Vegas, whieh would be 
extremely detrimental to the hotel and gaming industry. Following the 9/11 attacks in 
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New York City, annual tourism has increased every calendar year since 2001. In 2013, 
54.3 million people visited New York City, which is 16 million more than 2000 (36.2 
million).204 xhe exact site of the terrorist attack has also drawn 19 million visitors to the 
9/11 Memorial since it opened in 2011, which suggests that a terrorist attack occurring at 
a facility is not necessarily a deterrence for future visitors. Furthermore, a memorial for 
the attack may become a tourist destination in itself. 

4. Individual Gaming Facilities Are Not Critical Infrastructure 

At the federal level, the gaming facilities subsector uses total gross revenue and 
tax revenue as the justification for the inclusion of casinos as CL The DHS gaming 
subsector also does not identify individual facilities as being more or less critical than 
other gaming facilities. Choosing not to delineate importance (based on revenue, 
economic impact, tax base, population, or any other measure) aligns with the concept of 
the resiliency that has been demonstrated across the Las Vegas Strip casinos. No 
individual casino in the country has significant impacts at the gaming industry at the 
local, regional, or national level. A network of hundreds of gaming facilities provides a 
variety of gambling options even if specific locations are unavailable due to business 
closure, a terrorist attack, or any other reason. This resiliency within the gaming 
subsector buffers disruptions and allows for a steady generation of revenue without the 
need for federal resources to be dedicated to the protection of specific gaming facilities. 

C. CASE STUDY: SCARCITY OF FUNCTION AND A SINGUE POINT OF 

FAIUURE FOR CHARUESTON, WV WATER SUPPUY 

Clean water is essential to human survival across the world. A mix of public and 
private utility providers provide water services in the United States, and protection of 
these critical services falls under the DHS Cl water sector. Loss of water services causes 
both an immediate risk to human health and cascading impacts across other Cl sectors 
dependent on water services.205 Prioritizing the protection of water infrastructure on the 

204 “NYC Statistics,” accessed July 23, 2015, littp://www.nycgo.com/articles/nyc-statistics-page. 

205 Department of Homeland Security, Water Sector-Specific Plan An Annex to the National 
Infrastructure Protection Plan (Washington, DC: Department of Homeland Security, 2010), 13, https:// 
www.dhs.gOv/xlibrary/assets/nipp-ssp-water-2010.pdf 
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nationwide level is deseribed in the 2010 NIPP Water Sector Specific Plan through the 
evaluation of “higher-eonsequenee and higher-priority utilities. Four eriteria are used to 
better identify these national level high-consequenee assets: (1) population served; (2) 
amount of ehlorine gas stored on site; (3) eeonomie impaet; and (4) eritieal eustomers 

served. ”206 

In January 2014, a toxie ehemieal spill of 10,000 gallons of 4- 
methyleyelohexanemethonol eontaminated the Elk River one and half miles upstream of 
the City of Charleston in West Virginia. This spill resulted in the total eontamination of 
water serviees (drinking, washing, bathing) to 300,000 residents in nine eounties.207 

Publie water utility serviee was the primary souree of water for the majority of the 
residents in the area: 

• 17.6% of residents reported having rainwater and 5.6% reported well 
water available, whieh resulted in the majority of residents requiring 
bottled water beeause tap water was not available. 

• 37% of residents reported using tap water during the “do not use” order, 
whieh showed that adequate supplies of bottled water were not available 
for all water related aetivities ineluding showering/bathing 

• 78.8% of users during restrietion showered/bathed with eontaminated 

water.208 

The ehemieal spill into the Elk River is an example of both a seareity of funetion 
and a single point of failure in an infrastrueture system. Munieipal water serviee was the 
primary provider of elean water (an essential-to-life serviee) for the residents of 
Charleston and the surrounding eounties. Without the munieipal water serviee, a seareity 


206 Department of Homeland Security, Water Sector-Specific Plan An Annex to the National 
Infrastructure Protection Plan, 13. 

207 West Virginia Bureau for Public Health (WVBPH) and the Agency for Toxic Substances Disease 
Registry, Elk River Chemical Spill Health Effects Findings of Emergency Department Record Review April 
2014 Collaborative Investigation by the West Virginia Bureau for Public Health (WVBPH) and the Agency 
for Toxic Substances Disease Registry (ATSDR) (West Virginia: Department of Health & Human 
Resources, 2014), http://www.dhhr.wv.gov/News/chemical-spilFDocuments/ElkRiverMedicalRecord 
Summary.pdf 

208 Centers for Disease Control and Prevention, Disaster Response and Recovery Needs of 
Communities Affected by the Elk River Chemical Spill, West Virginia (Atlanta, GA: Centers for Disease 
Control and Prevention, 2014), hnp://www.dhhr.wv.gov/News/2014/Documents/WVCASPERReport.pdf 
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of function occurred because other sourees were unable to provide adequate supplies of 
the necessary service to the population. The upstream eontamination represented a single 
point of failure in the water service system beeause no alternate souree was available 
from whieh the water treatment faeility and water system eould draw. The chemical spill 
into the sole water supply for the majority of citizens caused the entire water service 
infrastrueture to fail. 

This failure of the water infrastructure system is an example of a Cl system 
critieal to the local jurisdiction. The lack of water serviees in an isolated area was not 
regionally or nationally significant to water infrastructure systems. The laek of water to 
this isolated area was also not debilitating to the region or the nation. This example is 
useful for studying scareity of function and single points of failure in a Cl system. 

Currently, DHS measures the consequences of loss of water serviees by 
evaluating the publie health effects, economic impacts, psychological impacts, and 
interdependencies and dependencies with other infrastructure sectors.^09 it seems more 
useful to evaluate the critieality of water systems through the scarcity of the water 
infrastructure function and the existence of a single point of failure in delivery of the 
service. At a loeal and regional level, resiliency in the delivery of essential services exists 
aeross infrastrueture sectors. In the West Virginia ehemical spill, regional and national 
systems provided bottled and trucked water in an effeetive manner to meet serviee 
demands. 

The Charleston outage is useful for evaluating the loss of single sources of 
essential functions at the national level. The Hoover Dam is the sole provider for 
providing water serves to 1.3 million citizens.^io The Hoover Dam also holds baek a 9.2 
trillion gallon^n reservoir that would require million gallons of a toxie ehemical to 
contaminate. In West Virginia, the mining industry positioned 10,000 gallons of a 

209 Department of Homeland Seeurity, Water Sector-Specific Plan An Annex to the National 
Infrastructure Protection Plan, 25. 

210 “Hoover Dam—Frequent Asked Questions,” Mareh 12, 2015, http://www.usbr.gov/le/hoover 
dam/ faqs/damfaqs. html. 

211 “Hoover Dam and Powerplant,” September 2013, http://www.usbr.gov/le/region/pao/broehures/ 
hoover.html. 
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dangerous chemical near a waterway but no million-gallon storage tanks of toxic 
chemicals are positioned directly around the Hoover Dam. It is also not a viable scenario 
for a terrorist group, or other enemy, to transport millions of gallons of a toxic chemical 
to a nationally significant water source. It would take 20,000 tractor-trailer trucks 
carrying 5,000 gallons of a chemical to amass one million gallons of a contaminant. Even 
if the Hoover Dam were somehow contaminated with a chemical, it would likely have 
minimal impact on its ability to generate four billion kilowatts of power,2i2 and the 
subsequent functions of other infrastructure sectors dependent on it for water. 


Figure 34. Interdependencies with Water Sector Infrastructure from National 

Infrastructure Protection Plan 



From Department of Ftomeland Security, Water Sector-Specific Plan An Annex to the 
National Infrastructure Protection Plan (Washington, DC: Department of Fiomeland 
Security, 2010), https://www.dhs.gov/xlibrary/assets/nipp-ssp-water-2010.pdf 


On the national level, do sole providers and single points of failure exist in Cl 
systems and services? If they do exist, how large is the scale of the disruption needed to 

212 “Floover Dam—Frequent Asked Questions.” 
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break the system (example: What volume of toxie ehemieals would be needed to 
eontaminate the Heteh Hetehy Water System that serves 1.7 million oitizens2i3 in San 
Franeiseo, CA? Would an aeeidental or intentional release of that volume of ehemieals be 
viable? It is likely not a viable seenario?). In the loeal ease of the Charleston spill, water 
for drinking, eooking, and bathing was impaeted but did the eontamination have any 
impact on other infrastructure systems, such as electrical power, telecommunications, 
transportation, petroleum liquid, or natural gas as shown in Figure 34 from the National 
Infrastructure Protection Planl A drinking water outage is not necessarily an outage of 
all water uses across every infrastructure function that uses water as a component of 
providing its function. 


313 “Hetch Hetehy Water System,” accessed July 23, 2015, http://bawsca.org/water-supply/hetch- 
hetchy-water-system/. 
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VI. POTENTIAL SOLUTIONS 


DHS can simplify the statutory IP mission by removing the designation of 
“eritieal” from facilities not essential to the health and safety of the publie and the 
economic security of the nation. Many facilities eurrently deemed critical are likely not 
even critical to the region and locality that they serve as shown by the case studies of 
New York, Las Vegas, and Charleston, WV. To identify facilities more effectively that 
are Cl, DHS should consider a risk-based approaeh within a more narrow definition of Cl 
modeled after best practiees from the United Kingdom. DHS should also reexamine why 
infrastrueture facilities have been designated to be primary targets for terrorism. Cl 
proteetion policy should not be focused on large-seale attaeks to Cl faeilities when they 
have not been the target of the largest domestic terrorist attacks and were rarefy the target 
of the 130,000 terrorist attacks across the world over the last 50 years. 

DHS is required to manage risks to Cl by the NIPP, PPD-21, and the Homeland 
Security Act of 2002 but “DHS is not positioned to manage an integrated and eoordinated 
government-wide approach for Cl vulnerability assessment aetivities as called for by the 
NIPP.”214 A remedy for this problem is redueing the overall number of facilities across 
the 16 Cl seetors. Removing the low-risk and non-eritical facilities ean simplify the 
overall task by reducing the total number of locations, and the subsequent time and 
resourees needed to conduct assessments, plans, sector outreach, working group meeting, 
and national-level program management. Eaeh of these aetions would be easier to 
aceomplish with a smaller number of Cl faeilities to assess. 

While the 2013 National Infrastructure Protection Plan provides a supplemental 
tool for executing a risk management approaeh, the methodology is too broad because it 
can apply to “all threats and hazards, ineluding eyber incidents, natural disasters, man¬ 
made safety hazards, and active of terrorism, although different information and 


214 Government Accountability Office, Critical Infrastructure Protection DHS Action Needed to 
Enhance Integration and Coordination of Vulnerability Assessment Efforts, 37. 
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methodologies may be used to understand eaeh.”2i5 While a national plan should have a 
speeifie strategy, the NIPP “goals and objeetives are likely to vary aeross seetors and 
organizations depending on the risk landseape, operating environment, and eomposition 
of a speeifie industry, resouree, or other aspeet of eritieal infrastruoture.”2i6 The plan 
states the importanee of measuring effeetiveness but the end state and performanee 
metries are undefined. Adopting a more foeused risk-based approaeh, sueh as the 
methods used by the United Kingdom, ean assist DHS in evaluating if terrorism is the 
primary risk to a faeility. 

A. RECOMMENDATION: FOLLOW BEST PRACTICES FROM ANALYSIS 

OF THE UNITED KINGDOM’S CRITICAL INFRASTRUCTURE 

POLICY 

Key similarities allow for a eomparison of the U.S.’s and the UK’s Cl polieies. 
Both eountries view the proteetion of Cl as a national seeurity priority beeause the loss of 
Cl faeilities or systems would eause devastating impaets to the safety and health of the 
publie, eeonomy, and the overall well-being of the eountry. 

The UK’s definition of Cl is more refined in deseribing both the eore term and 
definition. Rather than just “eritieal infrastrueture,” the United Kingdom uses the term 
“national infrastrueture” to emphasize the seope of the mission, whieh is foeused on 
faeilities impaeting the entire nation. The United Kingdom defines national infrastrueture 
as “faeilities, systems, sites and networks neeessary for the funetioning of the eountry and 
the delivery of the essential serviees upon whieh daily life in the UK depends.The 
definition makes it elear that national infrastrueture is exelusively the systems that the 
entire eountry is dependent on for daily life. It ean be a best praetiee adopted by the 
United States. Both the United States and the United Kingdom understand faeilities and 
systems that provide vital serviees to the eountry need to be proteeted against natural 


Department of Homeland Security, Supplemental Tool: Executing a Critical Infrastructure Risk 
Management Approach. 

216 Ibid. 

212 “About: The National Infrastructure,” accessed July 23, 2015, http://www.cpni.gov.uk/about/cni/. 
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disasters and terrorist attaeks. Both countries designate these facilities and systems as 
“critical infrastructure.” 

B. HOW THE UNITED KINGDOM IS PROTECTING INFRASTRUCTURE 

Since the resources needed to protect infrastructure assets are limited, and 
vulnerabilities at every facility are unequal, a way needs to be created to prioritize 
facilities to guide the protection mission. The United Kingdom uses a risk-based system 
for prioritizing infrastructure, as shown in Figure 35. 


Figure 35. Using a Risk-Based Approach to Prioritize 
Sector Resilience Planning 
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From Cabinet Office, Strategic Framework and Policy Statement on Improving the 
Resilience of Critical Infrastructure to Disruption from Natural Flazards (United 
Kingdom: Cabinet Office, 2010), https://www.gov.uk/government/publications/strategic- 
framework-and-policy-statement-on-improving-the-resilience-of-critical-infrastructure- 
to-disruption-from-natural-hazards. 


When assessing risks to Cl, the United Kingdom evaluates the likelihood of 
something happening in the next five years, and the consequences or impacts that people 
will feel if it does occur.^is After determining the risk, the consequence is measured on a 


21^ Cabinet Office, Strategic Framework and Policy Statement on Improving the Resilience of Critical 
Infrastructure to Disruption from Natural Hazards (United Kingdom: Cabinet Office, 2010), 2, 
https://www.gov.uk/govemment/publications/strategic-framework-and-policy-statement-on-improving-the- 
resilience-of-critical-infrastmcture-to-dismption-from-natural-hazards. 
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0-5 scale based on the number of fatalities, illness/injury eaused, soeial disruptions, 
eeonomie harm, and psyehologieal impaet.219 A matrix allows for infrastrueture assets to 
be plotted based on eritieality to the nation and the assessment of likelihood from 
eombining vulnerability and existenee of a threat. For an infrastrueture asset to be 
eonsidered high priority, both a high level of eritieality and a high likelihood of 
something oeeurring must be demonstrated. 

This risk-based approaeh is used for both the prioritization of faeilities and 
evaluation of seeurity threats. As Figure 36 depiets, the highest priority attaeks would be 
displayed in the upper right while the lowest priorities would fall in the low left due to 
low plausibility of oeeurring and low impaet seores. The matrix-based risk assessment 
allows senior leaders and planners to deeide objeetively how they want to address risks. 
A senior leader who is most eoneemed with high impact/eonsequenee attaeks, would be 
able to look at the matrix and deeide, “eatastrophie terrorist attaeks” are the areas to 
whieh resourees should be alloeated. If a senior leader wants to dedieate resourees to the 
highest likelihood of attaek, “attaeks on transportation systems” and “eyber-attaeks” 
would be the priority. This type of objeetive analysis of risk allows a senior offieial to 
make informed deeisions. 


219 Cabinet Office, Strategic Framework and Policy Statement on Improving the Resilience of Critical 
Infrastructure to Disruption from Natural Hazards (United Kingdom: Cabinet Office, 2010), 4. 
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Figure 36. Risks of Terrorist and Other Malicious Attacks 
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From Cabinet Office, Strategic Framework and Policy Statement on Improving the 
Resilience of Critical Infrastructure to Disruption from Natural Flazards (United 
Kingdom: Cabinet Office, 2010), 10, https://www.gov.uk/govemment/publications/ 
strategic-framework-and-policy-statement-on-improving-the-resilience-of-critical-infra 
stmcture-to-dismption-from-natural-hazards. 


Table 5 shows the similarities and differences between the infrastructure sectors 
designated by the United States compared to the United Kingdom. 
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Table 5. Comparison of U.S. and U.K. Infrastructure Sectors 


U.S. Critical Infrastructure Sectors220 

U.K. National Infrastructure221 

Chemical* 


Commercial Facilities* 


Communications 

Communications 

Critical Manufacturing* 


Dams* 


Defense Industrial Base* 


Emergency Services 

Emergency Services 

Energy 

Energy 

Financial Services 

Financial services 

Food and Agriculture 

Food 

Government Facilities 

Government 

Flealth Care and Public Flealth 

Flealth 

Information Technology 


Nuclear Reactors, Materials, and Waste* 


Transportation Systems 

Transport 

Water and Wastewater Systems 

Water 


*Privately owned and operated 


While the GAO report highlights the issues DHS is having with prioritizing Cl 
protection, the United Kingdom addresses the problem of determining what is critical or 
non-critical by using a risk-based approach for evaluating facilities within the 
infrastructure sectors. Not everything within a national infrastructure sector is critical. 
Within the sectors are certain critical elements of infrastructure, “the loss or compromise 
of which would have a major detrimental impact on the availability or integrity of 
essential services, leading to severe economic or social consequences or to loss of 
life.”222 These critical assets make up the nation’s critical national infrastructure (CNI) 
and are referred to individually as “infrastructure assets.” Infrastructure assets may be 
physical (e.g., sites, installations, pieces of equipment) or logical (e.g., information 
networks, systems).223 


220 “Critical Infrastructure Sectors.” 

221 “About: The National Infrastructure.” 

222 “About: The National Infrastructure.” 

223 Ibid. 
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C. RECOMMENDATIONS FOR POLICY REVISION 

While U.S. Cl policies allow for broad inclusiveness of facilities within the 
sectors, the United Kingdom makes a clear designation that the loss of the infrastructure 
asset must have a major detrimental impact to the country. The United Kingdom uses a 
risk-based approach to determine how resources will be allocated and protection of 
facilities will be prioritized. The United States should adopt a similar risk-based approach 
that establishes values for prioritization of critical facilities based on criticality, 
vulnerability, and threat. By using a risk-based matrix to evaluate current Cl sectors, the 
United States could realign the current 16 Cl sectors to match the nine used by the United 
Kingdom. Reducing the total number of infrastructure sectors would simplify the overall 
protection mission because each sector would have its own dedicated DHS staff, 
reporting requirements, resource allocation, supporting federal agencies, and performance 
metrics. 

The United States could reduce the number of Cl sectors by removing the sectors 
owned, operated, and protected by the private sector (CF sector, chemical, and critical 
manufacturing). Individual facilities within these sectors are unlikely to cause 
catastrophic national impacts if they are destroyed or inoperable. These facilities also do 
not meet the UK’s definition of national infrastructure. 

Along the same lines, “information technology” is a nebulous term for 
designating a sector as critical and is not a term used by the United Kingdom for national 
infrastructure. The sector is defined as the “virtual and distributed functions produce and 
provide hardware, software, and information technology systems and services, and—in 
collaboration with the Communications Sector—the Internet.”224 These systems or 
components are unlikely to cause catastrophic damages to the entire nation if they are in 
operable, which makes the designation of Cl unnecessary. The systems critical to 
communication can be addressed under the responsibilities of the communications sector. 


224 “Information Technology Sector,” June 12, 2014, http://www.dhs.gov/information-technology- 
sector. 
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Accordingly, “nuclear reactors” do not need to be a separate Cl seetor from 
“energy,” whieh would also align with the UK national infrastructure designations. The 
energy produeed by a nuclear power plant is eritieal to the U.S. eleetric power system. It 
is unlikely that a nuclear power plant not currently produeing power would eause 
catastrophie eonsequenees if it was attaeked or damaged by a natural disaster. The 
proteetion of large quantities of nuelear material is likely a separate national seeurity 
mission that would be earned out by DOD, the Department of Energy, and the Nuelear 
Regulatory Commission rather than being designated a Cl proteetion mission under the 
authority of DHS. 

Beyond just looking at damage or the loss of infrastrueture assets, the term 
“resilienee” is instrumental to UK Cl proteetion. The Cabinet Offiee defines resilienee as 
the ability to absorb, respond to, and reeover from emergenoies.225 When faeilities are 
damaged by a disaster or attack, if the faeility provides a eritieal funetion, a resilient 
faeility may be able to eontinue to function or be minimally disrupted. 

In the publically available annual Sector Resilience Plans, the Cabinet Office 
provides information about the hazards/threats to each of the nine sectors. The report also 
provides a summary of the existing level of resilienee to address the hazards/threats and 
aetionable reeommendations for inereasing resilienee. For example, in the 2014 plan, the 
food seetor highlights its risk as a “widespread dependeney on other essential serviees, 
sueh as fuel.” The resilienee of the seetor is demonstrated by the ability to “eontinue to 
operate at or near to eapaeity despite the severe winter weather and flooding events 
experienee from 2010 through to early 2014,” and the sector can be strengthened by 
“government sponsored researeh looking at the resilienee of the food supply ehain to port 
disruption and pineh points ereated by potential fuel disruptions.”226 Publishing polieies 
for addressing eurrent risk and eondueting future planning to mitigate further risk is a 
transparent method of addressing shortfalls, while aeknowledging the efforts to make Cl 
assets more resilient. 

225 “Emergency Planning,” accessed July 23, 2015, https://www.gov.uk/govemment/policies/emer 
gency-planning. 

226 Summary of the 2014 Sector Resilience Plans,” August 1, 2014, https://www.gov.uk/govem 
ment/collections/sector-resilience-plans. 
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The United Kingdom publishes annual publie reports that highlight sueeesses and 
shortfalls aeross eaeh of the infrastructure sectors without compromising sensitive 
information or pointing blame. DHS should adopt this transparent method of informing 
the public and governmental stakeholders about the status of accomplishing the IP 
mission. The negative findings of the 2012 GAO report would likely not have occurred if 
an annual report were published providing a clear picture of the IP mission across each 
sector. 
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VII. FINDINGS, CONCLUSIONS, AND RECOMMENDATIONS 


Based on this research, very few facilities are critical to the nation. The nationally 
significant facilities are likely too large or too secure for a terrorist group to destroy, and 
also not aligned with the targets of previous attacks. On a local and regional level, 
redundancy and resiliency occur across infrastructure systems that allow affected areas to 
absorb outages and unaffected areas to provide alternative services. As a backstop, 
national capabilities can quickly deliver essential services during outages, such as the 
bottled water supplied to Charleston, WV following the chemical spill. Also, the 
enormous complexity within the infrastructure systems makes predicting the impacts of 
outages extremely difficult, as demonstrated by the unanticipated economic gains in 
Lower Manhattan following the 9/11 attacks. The destruction of supposedly critical 
facilities has demonstrated that greater resilience does occur across infrastructure systems 
than DHS generally assumes. Instead of focusing protection efforts on potential losses, 
greater value may be found in understanding existing resiliency. 

A. FINDINGS 

This research examined the federal IP policies that have been issued over the past 
35 years to determine the origin and evolution of the mission. Within these documents, a 
consensus can be drawn that the definition of the term “critical infrastructure” is the 
systems and assets nationally significant and the loss of which would result in debilitating 
consequences to the safety and security of the United States. The 10 overarching Cl 
policies227 released over the past 19 years consistently describe Cl as being nationally 
significant, providing vital services, being part of an interconnected system, causing 
debilitating impacts if destroyed, and providing a service necessary to the health and 
safety of the general public. 

Based on the analysis, infrastructure that lacks national significance, criticality, 
and interconnectedness to other infrastructure systems does not meet this definition. As a 

227 Quadrennial Homeland Security Review, NIPP, PPD-21, Exec. Order No. 13636, NIPP, National 
Security Strategy, HSPD-1, USA PATRIOT Act, PDD/NSC-63, and Exec. Order No. 13010. 
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result, a discrepancy occurs between the federal policies that define Cl and how DHS 
currently addresses its statutory IP mission to identify, prioritize, and protect the nation’s 

most vital infrastructure.228 

A problem with the current policies is that many of the facilities currently 
designated as critical do not meet the consensus definition identified in the literature 
review but are still considered to be “critical infrastructure.” This may have stemmed 
from the early directive for the newly formed DHS to develop a list of all of the critical 
facilities across the country.229 xhis thesis demonstrated challenges DHS has faced from 
the creation of the NADB, the NCIPP, and the ongoing mandate to develop a centralized 
list of CL 

Modern military theories provide a potential explanation for the focus of DHS’s 
efforts because the threats from terrorism have likely been evaluated based on the 
education and experience of senior officials drawing on their experiences with the 
principles of strategic warfare. Nationally significant infrastructure facilities that can 
cripple the essential functions of the entire country would be attractive targets for an 
enemy nation-state to strike with ballistic missile and airpower capabilities during a war. 
The current terrorist threat comes from homegrown violent extremists and members of 
terrorist groups who are motivated to inflict mass casualties in the locations that are most 
visible and easily accessible.230 An individual terrorist or a small group of terrorists most 
likely lack the intelligence, organizational coordination, manpower, and resources to 
conduct a strategic warfare campaign against nationally significant infrastructure targets 
with the intent of crippling essential-to-life systems across the country. The strategic 
warfare approach of developing a static list of vulnerable assets does not match the 
unpredictable and dynamic threat from terrorism. The current IP policies identify the 
likely targets of a nation-state army and assume them to be the same targets that terrorists 
would have the intention and capability of attacking. 

228 jjjg House, Presidential Policy Directive—Critical Infrastructure Security and Resilience 

Presidential Policy Directive/PPD-21—Critical Infrastructure Security and Resilience. 

229 United States Congress, Committee Reports 109th Congress (2005-2006) House Report 109-713 — 
Part 1. 

230 “Countering Violent Extremism.” 
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The concept of protecting Cl could altogether be a wasted effort because when 
supposedly Cl is destroyed, the impacts are often negligible, or in some cases, even 
results in economic gains. Even when terrorists do successfully strike, the consequences 
may be more complex than making a blanket assumption that all Cl facilities should be 
protected under all circumstances. Case studies of the WTC and the Las Vegas Strip 
casinos challenge the general assertion that negative economic consequences always 
result from the destruction of a “critical” facility. A case study of the 2014 toxic chemical 
spill into the primary water source serving Charleston, WV provides an example that is 
contrary to the assumption that the loss of a facility serving as a sole provider of an 
essential-to-life service results in cascading, debilitating impacts across all infrastructure 
sectors. 

While it was unforeseeable at the time, the Lower Manhattan area most heavily 
impacted by the 9/11 attacks is more valuable today and better positioned for the future 
than it was prior to 2001. If terrorists cannot cripple this nation by toppling 100-story 
commercial high-rise buildings, what kinds of facilities would have a debilitating impact 
on the entire nation if they were destroyed? Instead of being designated “critical,” the 
majority of infrastructure facilities are insignificant to the functions of the overall system 
because the loss of these facilities does not cause widespread disruptions to the nation, 
region, or even the local area. 

B. CONCLUSIONS 

The evidence presented within this thesis argued that DHS is not fulfilling the 
mission of protecting the infrastructure that is critical to the nation by expending 
resources on misaligned efforts at thousands of insignificant facilities. These problems 
are rooted in the current scope of the infrastructure mission being too large, but is further 
complicated because the types of facilities designated as critical may not be the likely 
targets of terrorists. The few facilities critical to the nation are most likely are too large, 
too remote, or too secure for a terrorist group to destroy, or to have an interest in 
targeting. 
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On a local and regional level, redundancy and resiliency occurs across 
infrastructure systems that allow affected areas to absorb outages and unaffeeted areas to 
provide alternative serviees. As a baekstop, national emergency response eapabilities ean 
quickly deliver essential serviees during outages, such as the bottled water supplied to 
Charleston, WV following the ehemieal spill into the water supply. Also, the enormous 
eomplexity within infrastrueture systems makes predieting the impaets of outages 
extremely difficult, as demonstrated by the unantieipated eeonomie gains in Lower 
Manhattan following the 9/11 attaeks. 

Based on this thesis, DHS should ensure that everything designated as “eritieal” 
meets the definition of eritieality, that the methodologies used for evaluating 
infrastrueture align to the mission of proteeting the nation for terrorism, and that 
proteetion efforts aeeount for the existing resilieney within the systems that provide 
essential-to-life infrastrueture aeross the eountry. 

Many infrastrueture faeilities are ineonsequential if attaeked, and if the loss of a 
faeility does not cause the widespread disruptions, it is not CL DHS should shift from an 
inclusive Cl poliey that allows faeilities to self-designate and self-assess risks to a poliey 
that assumes facilities are inconsequential to the seeurity and functions of the nation 
unless proven otherwise. 

C. RECOMMENDATIONS 

A solution for aoeomplishing the task of effeetively identifying, prioritizing, and 
proteeting Cl is refining the eriteria for how faeilities are determined to be eritieal. A 
lower number of eritieal facilities will reduce the overall seope of the proteetion mission. 
To identify faeilities Cl more effectively, DHS should consider using a risk-based 
approaeh within a more narrow definition of the term that ean be modeled after best 
praetiees from the United Kingdom. The United Kingdom uses the designation of 
“national infrastrueture” to emphasize the seope of the mission, whieh is foeused 
exelusively on the systems that the entire eountry is dependent on for daily life. For an 
infrastrueture asset to be eonsidered a national priority, both a high level of eritieality and 
a high likelihood of something negative oeeurring must be demonstrated. Adopting a 


112 



risk-based approach for both prioritization of facilities through the likelihood of 
destruction and evaluation of national impacts can assist DHS in more effectively 
designating facilities as “critical.” 

While infrastructure systems are interdependent, redundancy and resiliency also 
occur, which allow the larger systems to continue functioning during disruptions. 
Resiliency, or the ability of a facility to continue functioning, is the opposite of criticality. 
The ability of resilient systems to resume or continue functioning is the opposite of the 
failures and breakdowns in systems that DHS uses to frame the definitions of CL This 
concept of resilience follows the National Infrastructure Protection Plan, which states, 
“resilient infrastructure systems are flexible and agile and should be able to bounce back 
after disruption.”23i Within the resilient systems, disruptions that occur may cause 
beneficial changes. Policies centered on guarding a vast array of facilities from all types 
of risks potentially have the negative impact of preventing progress at the expense of 
protecting the status quo. 

The 2013 National Infrastructure Protection Plan operates under the assumption 
that “both domestic and international critical infrastructure assets represent potential 
prime targets for adversaries. Given the deeply rooted nature of these goals and 
motivations, critical infrastructure likely will remain highly attractive targets for state and 
non-state actors and others with ill intent. ”232 Based on this research, IP efforts are 
framed under an inaccurate assumption of the terrorist threat to them. Cl protection 
policies should not be the focus on large-scale attacks to facilities when they have not 
been the target of the largest domestic terrorist attacks and have rarely been the target of 
the 130,000 terrorist attacks across the world over the last 50 years. Terrorists have not 
previously targeted infrastructure and are unlikely to change their intentions in the future, 
which means that the way DHS views protecting infrastructure and preventing terrorism 
needs to be reformed. 


231 Department of Homeland Security, Supplemental Tool: Executing a Critical Infrastructure Risk 
Management Approach. 

232 Ibid. 


113 



D. OPPORTUNITY FOR FURTHER RESEARCH 


Additional research into Cl failures following the same methodology as the case 
studies within this thesis could determine if negligible losses, or even positive gains, 
occurred in a variety of circumstances. Looking at property values, tourism, tax revenue, 
hotel occupancy, and average rental prices of New Orleans, LA 10 years prior to and 10 
years following Hurricane Katrina would likely show that the post-disaster city has made 
positive economic gains that positions it for a better future. Greensburg, KS was 
completely destroyed by an EF-5 tornado in 2007, but is now known to be a model green 
community because all the buildings have been built to the highest environment 
certification and are wind powered.233 It is unlikely that Greensburg would have become 
a national model of environmental sustainability without the tornado destroying all the 
town’s existing infrastructure. In August 2007, the 1-35 bridge over the Mississippi River 
in Minneapolis collapsed and traffic had to be rerouted until the replacement bridge 
opened in September 2008. The bridge would have been considered a critical component 
of the transportation infrastructure but the resiliency within the system allowed for traffic 
to be disrupted rather than a catastrophic failure of the entire system occurring.234 While 
sports stadiums and arenas are infrastructure considered critical to the local or regional 
economy, these facilities have been frequently demolished as facilities age or teams are 
sold then relocated. One example is the KeyArena in Seattle, WA, which housed the 
NBA Seattle SuperSonics from 1967-78, 1985-94, and 1995-2008, but continues to 
function in the interim periods without a team and still provides a venue for various 
forms of sports and entertainment today.235 Across the United States, large shopping 
malls were the hubs of commerce but many are vacant today.236 Many shopping malls 


233 “Rebuilding Stronger, Better, Greener!” aecessed August 31, 2015, https://www.greensburgks.org/. 

234 “i. 35 \y St, Anthony Falls Bridge,” aeeessed August 31, 2015, http://www.dot.state.mn.us/i35w 
bridge/eollapse.html. 

235 “KeyArena Flistory,” aeeessed August 31, 2015, http://www.keyarena.eom/arena-information/ 
keyarena-history. 

236 Nelson D. Sehwartz, “The Eeonomies (and Nostalgia) of Dead Malls,” The New York Times, 
January 4, 2015, http://www.nytimes.eom/2015/01/04/business/the-eeonomies-and-nostalgia-of-dead- 
malls.html? r=0. 
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are considered Cl by DHS but has the disappearance of the physical retail infrastructure 
resulted in economic loses to the surrounding areas? 

Also, theoretical concepts should be explored based on the evidence presented 
within this thesis. If infrastructure systems have high levels of resilience and following 
disasters, areas are redeveloped in a more efficient and valuable manner, what would 
happen following a major cyber-attack that crippled the entire national power grid? While 
DHS and the Department of Energy work on strategies to harden the existing grid,237 
would a catastrophic failure result in the creation of a decentralized and sustainable 
energy infrastructure? The seemingly worst-case scenario of losing the existing power 
grid could eventually result in an improved energy delivery system, which would position 
the country for a stronger future. The worst circumstances may spur the greatest 
opportunity for positive change, which could shift homeland security strategies to focus 
primarily on effective recovery rather than on protecting existing systems. 


337 “Trustworthy Cyber Infrastructure for the Power Grid,” accessed August 31, 2015, http://www. 
dhs.gov/science-and-technology/csd-tcipg. 
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